include/functions.php

   1 <?php
   2         define('EXPECTED_CONFIG_VERSION', 26);
   3         define('SCHEMA_VERSION', 101);
   4
   5         $fetch_last_error = false;
   6         $pluginhost = false;
   7
   8         function __autoload($class) {
   9                 $class_file = str_replace("_", "/", strtolower(basename($class)));
  10
  11                 $file = dirname(__FILE__)."/../classes/$class_file.php";
  12
  13                 if (file_exists($file)) {
  14                         require $file;
  15                 }
  16
  17         }
  18
  19         mb_internal_encoding("UTF-8");
  20         date_default_timezone_set('UTC');
  21         if (defined('E_DEPRECATED')) {
  22                 error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
  23         } else {
  24                 error_reporting(E_ALL & ~E_NOTICE);
  25         }
  26
  27         require_once 'config.php';
  28
  29         if (DB_TYPE == "pgsql") {
  30                 define('SUBSTRING_FOR_DATE', 'SUBSTRING_FOR_DATE');
  31         } else {
  32                 define('SUBSTRING_FOR_DATE', 'SUBSTRING');
  33         }
  34
  35         define('THEME_VERSION_REQUIRED', 1.1);
  36
  37         /**
  38          * Return available translations names.
  39          *
  40          * @access public
  41          * @return array A array of available translations.
  42          */
  43         function get_translations() {
  44                 $tr = array(
  45                                         "auto"  => "Detect automatically",
  46                                         "ca_CA" => "Català",
  47                                         "en_US" => "English",
  48                                         "es_ES" => "Español",
  49                                         "de_DE" => "Deutsch",
  50                                         "fr_FR" => "Français",
  51                                         "hu_HU" => "Magyar (Hungarian)",
  52                                         "it_IT" => "Italiano",
  53                                         "ja_JP" => "日本語 (Japanese)",
  54                                         "nb_NO" => "Norwegian bokmål",
  55                                         "pl_PL" => "Polski",
  56                                         "ru_RU" => "Русский",
  57                                         "pt_BR" => "Portuguese/Brazil",
  58                                         "zh_CN" => "Simplified Chinese");
  59
  60                 return $tr;
  61         }
  62
  63         require_once "lib/accept-to-gettext.php";
  64         require_once "lib/gettext/gettext.inc";
  65
  66         function startup_gettext() {
  67
  68                 # Get locale from Accept-Language header
  69                 $lang = al2gt(array_keys(get_translations()), "text/html");
  70
  71                 if (defined('_TRANSLATION_OVERRIDE_DEFAULT')) {
  72                         $lang = _TRANSLATION_OVERRIDE_DEFAULT;
  73                 }
  74
  75                 /* In login action of mobile version */
  76                 if ($_POST["language"] && defined('MOBILE_VERSION')) {
  77                         $lang = $_POST["language"];
  78                 } else {
  79                         $lang = $_SESSION["language"];
  80                 }
  81
  82                 if ($lang) {
  83                         if (defined('LC_MESSAGES')) {
  84                                 _setlocale(LC_MESSAGES, $lang);
  85                         } else if (defined('LC_ALL')) {
  86                                 _setlocale(LC_ALL, $lang);
  87                         }
  88
  89                         if (defined('MOBILE_VERSION')) {
  90                                 _bindtextdomain("messages", "../locale");
  91                         } else {
  92                                 _bindtextdomain("messages", "locale");
  93                         }
  94
  95                         _textdomain("messages");
  96                         _bind_textdomain_codeset("messages", "UTF-8");
  97                 }
  98         }
  99
 100         startup_gettext();
 101
 102         require_once 'db-prefs.php';
 103         require_once 'version.php';
 104
 105         ini_set('user_agent', SELF_USER_AGENT);
 106
 107         require_once 'lib/pubsubhubbub/publisher.php';
 108         require_once 'lib/htmLawed.php';
 109
 110         $tz_offset = -1;
 111         $utc_tz = new DateTimeZone('UTC');
 112         $schema_version = false;
 113
 114         /**
 115          * Print a timestamped debug message.
 116          *
 117          * @param string $msg The debug message.
 118          * @return void
 119          */
 120         function _debug($msg) {
 121                 if (defined('QUIET') && QUIET) {
 122                         return;
 123                 }
 124                 $ts = strftime("%H:%M:%S", time());
 125                 if (function_exists('posix_getpid')) {
 126                         $ts = "$ts/" . posix_getpid();
 127                 }
 128                 print "[$ts] $msg\n";
 129         } // function _debug
 130
 131         /**
 132          * Purge a feed old posts.
 133          *
 134          * @param mixed $link A database connection.
 135          * @param mixed $feed_id The id of the purged feed.
 136          * @param mixed $purge_interval Olderness of purged posts.
 137          * @param boolean $debug Set to True to enable the debug. False by default.
 138          * @access public
 139          * @return void
 140          */
 141         function purge_feed($link, $feed_id, $purge_interval, $debug = false) {
 142
 143                 if (!$purge_interval) $purge_interval = feed_purge_interval($link, $feed_id);
 144
 145                 $rows = -1;
 146
 147                 $result = db_query($link,
 148                         "SELECT owner_uid FROM ttrss_feeds WHERE id = '$feed_id'");
 149
 150                 $owner_uid = false;
 151
 152                 if (db_num_rows($result) == 1) {
 153                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 154                 }
 155
 156                 if ($purge_interval == -1 || !$purge_interval) {
 157                         if ($owner_uid) {
 158                                 ccache_update($link, $feed_id, $owner_uid);
 159                         }
 160                         return;
 161                 }
 162
 163                 if (!$owner_uid) return;
 164
 165                 if (FORCE_ARTICLE_PURGE == 0) {
 166                         $purge_unread = get_pref($link, "PURGE_UNREAD_ARTICLES",
 167                                 $owner_uid, false);
 168                 } else {
 169                         $purge_unread = true;
 170                         $purge_interval = FORCE_ARTICLE_PURGE;
 171                 }
 172
 173                 if (!$purge_unread) $query_limit = " unread = false AND ";
 174
 175                 if (DB_TYPE == "pgsql") {
 176                         $pg_version = get_pgsql_version($link);
 177
 178                         if (preg_match("/^7\./", $pg_version) || preg_match("/^8\.0/", $pg_version)) {
 179
 180                                 $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 181                                         ttrss_entries.id = ref_id AND
 182                                         marked = false AND
 183                                         feed_id = '$feed_id' AND
 184                                         $query_limit
 185                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 186
 187                         } else {
 188
 189                                 $result = db_query($link, "DELETE FROM ttrss_user_entries
 190                                         USING ttrss_entries
 191                                         WHERE ttrss_entries.id = ref_id AND
 192                                         marked = false AND
 193                                         feed_id = '$feed_id' AND
 194                                         $query_limit
 195                                         ttrss_entries.date_updated < NOW() - INTERVAL '$purge_interval days'");
 196                         }
 197
 198                         $rows = pg_affected_rows($result);
 199
 200                 } else {
 201
 202 /*                      $result = db_query($link, "DELETE FROM ttrss_user_entries WHERE
 203                                 marked = false AND feed_id = '$feed_id' AND
 204                                 (SELECT date_updated FROM ttrss_entries WHERE
 205                                         id = ref_id) < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)"); */
 206
 207                         $result = db_query($link, "DELETE FROM ttrss_user_entries
 208                                 USING ttrss_user_entries, ttrss_entries
 209                                 WHERE ttrss_entries.id = ref_id AND
 210                                 marked = false AND
 211                                 feed_id = '$feed_id' AND
 212                                 $query_limit
 213                                 ttrss_entries.date_updated < DATE_SUB(NOW(), INTERVAL $purge_interval DAY)");
 214
 215                         $rows = mysql_affected_rows($link);
 216
 217                 }
 218
 219                 ccache_update($link, $feed_id, $owner_uid);
 220
 221                 if ($debug) {
 222                         _debug("Purged feed $feed_id ($purge_interval): deleted $rows articles");
 223                 }
 224         } // function purge_feed
 225
 226         function feed_purge_interval($link, $feed_id) {
 227
 228                 $result = db_query($link, "SELECT purge_interval, owner_uid FROM ttrss_feeds
 229                         WHERE id = '$feed_id'");
 230
 231                 if (db_num_rows($result) == 1) {
 232                         $purge_interval = db_fetch_result($result, 0, "purge_interval");
 233                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 234
 235                         if ($purge_interval == 0) $purge_interval = get_pref($link,
 236                                 'PURGE_OLD_DAYS', $owner_uid);
 237
 238                         return $purge_interval;
 239
 240                 } else {
 241                         return -1;
 242                 }
 243         }
 244
 245         function purge_orphans($link, $do_output = false) {
 246
 247                 // purge orphaned posts in main content table
 248                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
 249                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
 250
 251                 if ($do_output) {
 252                         $rows = db_affected_rows($link, $result);
 253                         _debug("Purged $rows orphaned posts.");
 254                 }
 255         }
 256
 257         function get_feed_update_interval($link, $feed_id) {
 258                 $result = db_query($link, "SELECT owner_uid, update_interval FROM
 259                         ttrss_feeds WHERE id = '$feed_id'");
 260
 261                 if (db_num_rows($result) == 1) {
 262                         $update_interval = db_fetch_result($result, 0, "update_interval");
 263                         $owner_uid = db_fetch_result($result, 0, "owner_uid");
 264
 265                         if ($update_interval != 0) {
 266                                 return $update_interval;
 267                         } else {
 268                                 return get_pref($link, 'DEFAULT_UPDATE_INTERVAL', $owner_uid, false);
 269                         }
 270
 271                 } else {
 272                         return -1;
 273                 }
 274         }
 275
 276         function fetch_file_contents($url, $type = false, $login = false, $pass = false, $post_query = false) {
 277                 $login = urlencode($login);
 278                 $pass = urlencode($pass);
 279
 280                 global $fetch_last_error;
 281
 282                 if (function_exists('curl_init') && !ini_get("open_basedir")) {
 283                         $ch = curl_init($url);
 284
 285                         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);
 286                         curl_setopt($ch, CURLOPT_TIMEOUT, 45);
 287                         curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 288                         curl_setopt($ch, CURLOPT_MAXREDIRS, 20);
 289                         curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
 290                         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 291                         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 292                         curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 293                         curl_setopt($ch, CURLOPT_USERAGENT, SELF_USER_AGENT);
 294                         curl_setopt($ch, CURLOPT_ENCODING , "gzip");
 295
 296                         if ($post_query) {
 297                                 curl_setopt($ch, CURLOPT_POST, true);
 298                                 curl_setopt($ch, CURLOPT_POSTFIELDS, $post_query);
 299                         }
 300
 301                         if ($login && $pass)
 302                                 curl_setopt($ch, CURLOPT_USERPWD, "$login:$pass");
 303
 304                         $contents = @curl_exec($ch);
 305
 306                         if ($contents === false) {
 307                                 $fetch_last_error = curl_error($ch);
 308                                 curl_close($ch);
 309                                 return false;
 310                         }
 311
 312                         $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
 313                         $content_type = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
 314                         curl_close($ch);
 315
 316                         if ($http_code != 200 || $type && strpos($content_type, "$type") === false) {
 317                                 return false;
 318                         }
 319
 320                         return $contents;
 321                 } else {
 322                         if ($login && $pass ){
 323                                 $url_parts = array();
 324
 325                                 preg_match("/(^[^:]*):\/\/(.*)/", $url, $url_parts);
 326
 327                                 if ($url_parts[1] && $url_parts[2]) {
 328                                         $url = $url_parts[1] . "://$login:$pass@" . $url_parts[2];
 329                                 }
 330                         }
 331
 332                         $data = @file_get_contents($url);
 333
 334                         if (!$data && function_exists('error_get_last')) {
 335                                 $error = error_get_last();
 336                                 $fetch_last_error = $error["message"];
 337                         }
 338                         return $data;
 339                 }
 340
 341         }
 342
 343         /**
 344          * Try to determine the favicon URL for a feed.
 345          * adapted from wordpress favicon plugin by Jeff Minard (http://thecodepro.com/)
 346          * http://dev.wp-plugins.org/file/favatars/trunk/favatars.php
 347          *
 348          * @param string $url A feed or page URL
 349          * @access public
 350          * @return mixed The favicon URL, or false if none was found.
 351          */
 352         function get_favicon_url($url) {
 353
 354                 $favicon_url = false;
 355
 356                 if ($html = @fetch_file_contents($url)) {
 357
 358                         libxml_use_internal_errors(true);
 359
 360                         $doc = new DOMDocument();
 361                         $doc->loadHTML($html);
 362                         $xpath = new DOMXPath($doc);
 363
 364                         $base = $xpath->query('/html/head/base');
 365                         foreach ($base as $b) {
 366                                 $url = $b->getAttribute("href");
 367                                 break;
 368                         }
 369
 370                         $entries = $xpath->query('/html/head/link[@rel="shortcut icon" or @rel="icon"]');
 371                         if (count($entries) > 0) {
 372                                 foreach ($entries as $entry) {
 373                                         $favicon_url = rewrite_relative_url($url, $entry->getAttribute("href"));
 374                                         break;
 375                                 }
 376                         }
 377                 }
 378
 379                 if (!$favicon_url)
 380                         $favicon_url = rewrite_relative_url($url, "/favicon.ico");
 381
 382                 return $favicon_url;
 383         } // function get_favicon_url
 384
 385         function check_feed_favicon($site_url, $feed, $link) {
 386 #               print "FAVICON [$site_url]: $favicon_url\n";
 387
 388                 $icon_file = ICONS_DIR . "/$feed.ico";
 389
 390                 if (!file_exists($icon_file)) {
 391                         $favicon_url = get_favicon_url($site_url);
 392
 393                         if ($favicon_url) {
 394                                 // Limiting to "image" type misses those served with text/plain
 395                                 $contents = fetch_file_contents($favicon_url); // , "image");
 396
 397                                 if ($contents) {
 398                                         // Crude image type matching.
 399                                         // Patterns gleaned from the file(1) source code.
 400                                         if (preg_match('/^\x00\x00\x01\x00/', $contents)) {
 401                                                 // 0       string  \000\000\001\000        MS Windows icon resource
 402                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa MS Windows icon resource");
 403                                         }
 404                                         elseif (preg_match('/^GIF8/', $contents)) {
 405                                                 // 0       string          GIF8            GIF image data
 406                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa GIF image");
 407                                         }
 408                                         elseif (preg_match('/^\x89PNG\x0d\x0a\x1a\x0a/', $contents)) {
 409                                                 // 0       string          \x89PNG\x0d\x0a\x1a\x0a         PNG image data
 410                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa PNG image");
 411                                         }
 412                                         elseif (preg_match('/^\xff\xd8/', $contents)) {
 413                                                 // 0       beshort         0xffd8          JPEG image data
 414                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa JPG image");
 415                                         }
 416                                         else {
 417                                                 //error_log("check_feed_favicon: favicon_url=$favicon_url isa UNKNOWN type");
 418                                                 $contents = "";
 419                                         }
 420                                 }
 421
 422                                 if ($contents) {
 423                                         $fp = @fopen($icon_file, "w");
 424
 425                                         if ($fp) {
 426                                                 fwrite($fp, $contents);
 427                                                 fclose($fp);
 428                                                 chmod($icon_file, 0644);
 429                                         }
 430                                 }
 431                         }
 432                 }
 433         }
 434
 435         function print_select($id, $default, $values, $attributes = "") {
 436                 print "<select name=\"$id\" id=\"$id\" $attributes>";
 437                 foreach ($values as $v) {
 438                         if ($v == $default)
 439                                 $sel = "selected=\"1\"";
 440                          else
 441                                 $sel = "";
 442
 443                         print "<option value=\"$v\" $sel>$v</option>";
 444                 }
 445                 print "</select>";
 446         }
 447
 448         function print_select_hash($id, $default, $values, $attributes = "") {
 449                 print "<select name=\"$id\" id='$id' $attributes>";
 450                 foreach (array_keys($values) as $v) {
 451                         if ($v == $default)
 452                                 $sel = 'selected="selected"';
 453                          else
 454                                 $sel = "";
 455
 456                         print "<option $sel value=\"$v\">".$values[$v]."</option>";
 457                 }
 458
 459                 print "</select>";
 460         }
 461
 462         function getmicrotime() {
 463                 list($usec, $sec) = explode(" ",microtime());
 464                 return ((float)$usec + (float)$sec);
 465         }
 466
 467         function print_radio($id, $default, $true_is, $values, $attributes = "") {
 468                 foreach ($values as $v) {
 469
 470                         if ($v == $default)
 471                                 $sel = "checked";
 472                          else
 473                                 $sel = "";
 474
 475                         if ($v == $true_is) {
 476                                 $sel .= " value=\"1\"";
 477                         } else {
 478                                 $sel .= " value=\"0\"";
 479                         }
 480
 481                         print "<input class=\"noborder\" dojoType=\"dijit.form.RadioButton\"
 482                                 type=\"radio\" $sel $attributes name=\"$id\">&nbsp;$v&nbsp;";
 483
 484                 }
 485         }
 486
 487         function initialize_user_prefs($link, $uid, $profile = false) {
 488
 489                 $uid = db_escape_string($uid);
 490
 491                 if (!$profile) {
 492                         $profile = "NULL";
 493                         $profile_qpart = "AND profile IS NULL";
 494                 } else {
 495                         $profile_qpart = "AND profile = '$profile'";
 496                 }
 497
 498                 if (get_schema_version($link) < 63) $profile_qpart = "";
 499
 500                 db_query($link, "BEGIN");
 501
 502                 $result = db_query($link, "SELECT pref_name,def_value FROM ttrss_prefs");
 503
 504                 $u_result = db_query($link, "SELECT pref_name
 505                         FROM ttrss_user_prefs WHERE owner_uid = '$uid' $profile_qpart");
 506
 507                 $active_prefs = array();
 508
 509                 while ($line = db_fetch_assoc($u_result)) {
 510                         array_push($active_prefs, $line["pref_name"]);
 511                 }
 512
 513                 while ($line = db_fetch_assoc($result)) {
 514                         if (array_search($line["pref_name"], $active_prefs) === FALSE) {
 515 //                              print "adding " . $line["pref_name"] . "<br>";
 516
 517                                 if (get_schema_version($link) < 63) {
 518                                         db_query($link, "INSERT INTO ttrss_user_prefs
 519                                                 (owner_uid,pref_name,value) VALUES
 520                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."')");
 521
 522                                 } else {
 523                                         db_query($link, "INSERT INTO ttrss_user_prefs
 524                                                 (owner_uid,pref_name,value, profile) VALUES
 525                                                 ('$uid', '".$line["pref_name"]."','".$line["def_value"]."', $profile)");
 526                                 }
 527
 528                         }
 529                 }
 530
 531                 db_query($link, "COMMIT");
 532
 533         }
 534
 535         function get_ssl_certificate_id() {
 536                 if ($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"]) {
 537                         return sha1($_SERVER["REDIRECT_SSL_CLIENT_M_SERIAL"] .
 538                                 $_SERVER["REDIRECT_SSL_CLIENT_V_START"] .
 539                                 $_SERVER["REDIRECT_SSL_CLIENT_V_END"] .
 540                                 $_SERVER["REDIRECT_SSL_CLIENT_S_DN"]);
 541                 }
 542                 return "";
 543         }
 544
 545         function authenticate_user($link, $login, $password, $check_only = false) {
 546
 547                 if (!SINGLE_USER_MODE) {
 548
 549                         $user_id = false;
 550
 551                         global $pluginhost;
 552                         foreach ($pluginhost->get_hooks($pluginhost::HOOK_AUTH_USER) as $plugin) {
 553
 554                                 $user_id = (int) $plugin->authenticate($login, $password);
 555
 556                                 if ($user_id) {
 557                                         $_SESSION["auth_module"] = strtolower(get_class($plugin));
 558                                         break;
 559                                 }
 560                         }
 561
 562                         if ($user_id && !$check_only) {
 563                                 $_SESSION["uid"] = $user_id;
 564
 565                                 $result = db_query($link, "SELECT login,access_level,pwd_hash FROM ttrss_users
 566                                         WHERE id = '$user_id'");
 567
 568                                 $_SESSION["name"] = db_fetch_result($result, 0, "login");
 569                                 $_SESSION["access_level"] = db_fetch_result($result, 0, "access_level");
 570                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 571
 572                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 573                                         $_SESSION["uid"]);
 574
 575                                 $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 576                                 $_SESSION["pwd_hash"] = db_fetch_result($result, 0, "pwd_hash");
 577
 578                                 $_SESSION["last_version_check"] = time();
 579
 580                                 initialize_user_prefs($link, $_SESSION["uid"]);
 581
 582                                 return true;
 583                         }
 584
 585                         return false;
 586
 587                 } else {
 588
 589                         $_SESSION["uid"] = 1;
 590                         $_SESSION["name"] = "admin";
 591                         $_SESSION["access_level"] = 10;
 592
 593                         $_SESSION["hide_hello"] = true;
 594                         $_SESSION["hide_logout"] = true;
 595
 596                         $_SESSION["auth_module"] = false;
 597
 598                         if (!$_SESSION["csrf_token"]) {
 599                                 $_SESSION["csrf_token"] = sha1(uniqid(rand(), true));
 600                         }
 601
 602                         $_SESSION["ip_address"] = $_SERVER["REMOTE_ADDR"];
 603
 604                         initialize_user_prefs($link, $_SESSION["uid"]);
 605
 606                         return true;
 607                 }
 608         }
 609
 610         function make_password($length = 8) {
 611
 612                 $password = "";
 613                 $possible = "0123456789abcdfghjkmnpqrstvwxyzABCDFGHJKMNPQRSTVWXYZ";
 614
 615         $i = 0;
 616
 617                 while ($i < $length) {
 618                         $char = substr($possible, mt_rand(0, strlen($possible)-1), 1);
 619
 620                         if (!strstr($password, $char)) {
 621                                 $password .= $char;
 622                                 $i++;
 623                         }
 624                 }
 625                 return $password;
 626         }
 627
 628         // this is called after user is created to initialize default feeds, labels
 629         // or whatever else
 630
 631         // user preferences are checked on every login, not here
 632
 633         function initialize_user($link, $uid) {
 634
 635                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 636                         values ('$uid', 'Tiny Tiny RSS: New Releases',
 637                         'http://tt-rss.org/releases.rss')");
 638
 639                 db_query($link, "insert into ttrss_feeds (owner_uid,title,feed_url)
 640                         values ('$uid', 'Tiny Tiny RSS: Forum',
 641                                 'http://tt-rss.org/forum/rss.php')");
 642         }
 643
 644         function logout_user() {
 645                 session_destroy();
 646                 if (isset($_COOKIE[session_name()])) {
 647                    setcookie(session_name(), '', time()-42000, '/');
 648                 }
 649         }
 650
 651         function validate_csrf($csrf_token) {
 652                 return $csrf_token == $_SESSION['csrf_token'];
 653         }
 654
 655         function validate_session($link) {
 656                 if (SINGLE_USER_MODE) return true;
 657
 658                 $check_ip = $_SESSION['ip_address'];
 659
 660                 switch (SESSION_CHECK_ADDRESS) {
 661                 case 0:
 662                         $check_ip = '';
 663                         break;
 664                 case 1:
 665                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 666                         break;
 667                 case 2:
 668                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
 669                         $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1);
 670                         break;
 671                 };
 672
 673                 if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
 674                         $_SESSION["login_error_msg"] =
 675                                 __("Session failed to validate (incorrect IP)");
 676                         return false;
 677                 }
 678
 679                 if ($_SESSION["ref_schema_version"] != get_schema_version($link, true))
 680                         return false;
 681
 682                 if ($_SESSION["uid"]) {
 683
 684                         $result = db_query($link,
 685                                 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
 686
 687                         $pwd_hash = db_fetch_result($result, 0, "pwd_hash");
 688
 689                         if ($pwd_hash != $_SESSION["pwd_hash"]) {
 690                                 return false;
 691                         }
 692                 }
 693
 694 /*              if ($_SESSION["cookie_lifetime"] && $_SESSION["uid"]) {
 695
 696                         //print_r($_SESSION);
 697
 698                         if (time() > $_SESSION["cookie_lifetime"]) {
 699                                 return false;
 700                         }
 701                 } */
 702
 703                 return true;
 704         }
 705
 706         function load_user_plugins($link, $owner_uid) {
 707                 if ($owner_uid) {
 708                         $plugins = get_pref($link, "_ENABLED_PLUGINS", $owner_uid);
 709
 710                         global $pluginhost;
 711                         $pluginhost->load($plugins, $pluginhost::KIND_USER, $owner_uid);
 712
 713                         if (get_schema_version($link) > 100) {
 714                                 $pluginhost->load_data();
 715                         }
 716                 }
 717         }
 718
 719         function login_sequence($link, $login_form = 0) {
 720                 if (SINGLE_USER_MODE) {
 721                         authenticate_user($link, "admin", null);
 722                         load_user_plugins($link, $_SESSION["uid"]);
 723                 } else {
 724                         if (!$_SESSION["uid"] || !validate_session($link)) {
 725
 726                                 if (AUTH_AUTO_LOGIN && authenticate_user($link, null, null)) {
 727                                     $_SESSION["ref_schema_version"] = get_schema_version($link, true);
 728                                 } else {
 729                                          authenticate_user($link, null, null, true);
 730                                 }
 731
 732                                 if (!$_SESSION["uid"]) render_login_form($link, $login_form);
 733
 734                         } else {
 735                                 /* bump login timestamp */
 736                                 db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .
 737                                         $_SESSION["uid"]);
 738                         }
 739
 740                         if ($_SESSION["uid"] && $_SESSION["language"] && SESSION_COOKIE_LIFETIME > 0) {
 741                                 setcookie("ttrss_lang", $_SESSION["language"],
 742                                         time() + SESSION_COOKIE_LIFETIME);
 743                         }
 744
 745                         if ($_SESSION["uid"]) {
 746                                 load_user_plugins($link, $_SESSION["uid"]);
 747                         }
 748                 }
 749         }
 750
 751         function truncate_string($str, $max_len, $suffix = '&hellip;') {
 752                 if (mb_strlen($str, "utf-8") > $max_len - 3) {
 753                         return mb_substr($str, 0, $max_len, "utf-8") . $suffix;
 754                 } else {
 755                         return $str;
 756                 }
 757         }
 758
 759         function theme_image($link, $filename) {
 760                 if ($link) {
 761                         $theme_path = get_user_theme_path($link);
 762
 763                         if ($theme_path && is_file($theme_path.$filename)) {
 764                                 return $theme_path.$filename;
 765                         } else {
 766                                 return $filename;
 767                         }
 768                 } else {
 769                         return $filename;
 770                 }
 771         }
 772
 773         function get_user_theme($link) {
 774
 775                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
 776                         $theme_name = get_pref($link, "_THEME_ID");
 777                         if (is_dir("themes/$theme_name")) {
 778                                 return $theme_name;
 779                         } else {
 780                                 return '';
 781                         }
 782                 } else {
 783                         return '';
 784                 }
 785
 786         }
 787
 788         function get_user_theme_path($link) {
 789                 $theme_path = '';
 790
 791                 if (get_schema_version($link) >= 63 && $_SESSION["uid"]) {
 792                         $theme_name = get_pref($link, "_THEME_ID");
 793
 794                         if ($theme_name && is_dir("themes/$theme_name")) {
 795                                 $theme_path = "themes/$theme_name/";
 796                         } else {
 797                                 $theme_name = '';
 798                         }
 799                 } else {
 800                         $theme_path = '';
 801                 }
 802
 803                 if ($theme_path) {
 804                         if (is_file("$theme_path/theme.ini")) {
 805                                 $ini = parse_ini_file("$theme_path/theme.ini", true);
 806                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED) {
 807                                         return $theme_path;
 808                                 }
 809                         }
 810                 }
 811                 return '';
 812         }
 813
 814         function get_user_theme_options($link) {
 815                 $t = get_user_theme_path($link);
 816
 817                 if ($t) {
 818                         if (is_file("$t/theme.ini")) {
 819                                 $ini = parse_ini_file("$t/theme.ini", true);
 820                                 if ($ini['theme']['version']) {
 821                                         return $ini['theme']['options'];
 822                                 }
 823                         }
 824                 }
 825                 return '';
 826         }
 827
 828         function print_theme_includes($link) {
 829
 830                 $t = get_user_theme_path($link);
 831                 $time = time();
 832
 833                 if ($t) {
 834                         print "<link rel=\"stylesheet\" type=\"text/css\"
 835                                 href=\"$t/theme.css?$time \">";
 836                         if (file_exists("$t/theme.js")) {
 837                                 print "<script type=\"text/javascript\" src=\"$t/theme.js?$time\">
 838                                         </script>";
 839                         }
 840                 }
 841         }
 842
 843         function get_all_themes() {
 844                 $themes = glob("themes/*");
 845
 846                 asort($themes);
 847
 848                 $rv = array();
 849
 850                 foreach ($themes as $t) {
 851                         if (is_file("$t/theme.ini")) {
 852                                 $ini = parse_ini_file("$t/theme.ini", true);
 853                                 if ($ini['theme']['version'] >= THEME_VERSION_REQUIRED &&
 854                                                         !$ini['theme']['disabled']) {
 855                                         $entry = array();
 856                                         $entry["path"] = $t;
 857                                         $entry["base"] = basename($t);
 858                                         $entry["name"] = $ini['theme']['name'];
 859                                         $entry["version"] = $ini['theme']['version'];
 860                                         $entry["author"] = $ini['theme']['author'];
 861                                         $entry["options"] = $ini['theme']['options'];
 862                                         array_push($rv, $entry);
 863                                 }
 864                         }
 865                 }
 866
 867                 return $rv;
 868         }
 869
 870         function convert_timestamp($timestamp, $source_tz, $dest_tz) {
 871
 872                 try {
 873                         $source_tz = new DateTimeZone($source_tz);
 874                 } catch (Exception $e) {
 875                         $source_tz = new DateTimeZone('UTC');
 876                 }
 877
 878                 try {
 879                         $dest_tz = new DateTimeZone($dest_tz);
 880                 } catch (Exception $e) {
 881                         $dest_tz = new DateTimeZone('UTC');
 882                 }
 883
 884                 $dt = new DateTime(date('Y-m-d H:i:s', $timestamp), $source_tz);
 885                 return $dt->format('U') + $dest_tz->getOffset($dt);
 886         }
 887
 888         function make_local_datetime($link, $timestamp, $long, $owner_uid = false,
 889                                         $no_smart_dt = false) {
 890
 891                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 892                 if (!$timestamp) $timestamp = '1970-01-01 0:00';
 893
 894                 global $utc_tz;
 895                 global $tz_offset;
 896
 897                 # We store date in UTC internally
 898                 $dt = new DateTime($timestamp, $utc_tz);
 899
 900                 if ($tz_offset == -1) {
 901
 902                         $user_tz_string = get_pref($link, 'USER_TIMEZONE', $owner_uid);
 903
 904                         try {
 905                                 $user_tz = new DateTimeZone($user_tz_string);
 906                         } catch (Exception $e) {
 907                                 $user_tz = $utc_tz;
 908                         }
 909
 910                         $tz_offset = $user_tz->getOffset($dt);
 911                 }
 912
 913                 $user_timestamp = $dt->format('U') + $tz_offset;
 914
 915                 if (!$no_smart_dt) {
 916                         return smart_date_time($link, $user_timestamp,
 917                                 $tz_offset, $owner_uid);
 918                 } else {
 919                         if ($long)
 920                                 $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 921                         else
 922                                 $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 923
 924                         return date($format, $user_timestamp);
 925                 }
 926         }
 927
 928         function smart_date_time($link, $timestamp, $tz_offset = 0, $owner_uid = false) {
 929                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
 930
 931                 if (date("Y.m.d", $timestamp) == date("Y.m.d", time() + $tz_offset)) {
 932                         return date("G:i", $timestamp);
 933                 } else if (date("Y", $timestamp) == date("Y", time() + $tz_offset)) {
 934                         $format = get_pref($link, 'SHORT_DATE_FORMAT', $owner_uid);
 935                         return date($format, $timestamp);
 936                 } else {
 937                         $format = get_pref($link, 'LONG_DATE_FORMAT', $owner_uid);
 938                         return date($format, $timestamp);
 939                 }
 940         }
 941
 942         function sql_bool_to_bool($s) {
 943                 if ($s == "t" || $s == "1" || $s == "true") {
 944                         return true;
 945                 } else {
 946                         return false;
 947                 }
 948         }
 949
 950         function bool_to_sql_bool($s) {
 951                 if ($s) {
 952                         return "true";
 953                 } else {
 954                         return "false";
 955                 }
 956         }
 957
 958         // Session caching removed due to causing wrong redirects to upgrade
 959         // script when get_schema_version() is called on an obsolete session
 960         // created on a previous schema version.
 961         function get_schema_version($link, $nocache = false) {
 962                 global $schema_version;
 963
 964                 if (!$schema_version) {
 965                         $result = db_query($link, "SELECT schema_version FROM ttrss_version");
 966                         $version = db_fetch_result($result, 0, "schema_version");
 967                         $schema_version = $version;
 968                         return $version;
 969                 } else {
 970                         return $schema_version;
 971                 }
 972         }
 973
 974         function sanity_check($link) {
 975                 require_once 'errors.php';
 976
 977                 $error_code = 0;
 978                 $schema_version = get_schema_version($link, true);
 979
 980                 if ($schema_version != SCHEMA_VERSION) {
 981                         $error_code = 5;
 982                 }
 983
 984                 if (DB_TYPE == "mysql") {
 985                         $result = db_query($link, "SELECT true", false);
 986                         if (db_num_rows($result) != 1) {
 987                                 $error_code = 10;
 988                         }
 989                 }
 990
 991                 if (db_escape_string("testTEST") != "testTEST") {
 992                         $error_code = 12;
 993                 }
 994
 995                 return array("code" => $error_code, "message" => $ERRORS[$error_code]);
 996         }
 997
 998         function file_is_locked($filename) {
 999                 if (function_exists('flock')) {
1000                         $fp = @fopen(LOCK_DIRECTORY . "/$filename", "r");
1001                         if ($fp) {
1002                                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1003                                         flock($fp, LOCK_UN);
1004                                         fclose($fp);
1005                                         return false;
1006                                 }
1007                                 fclose($fp);
1008                                 return true;
1009                         } else {
1010                                 return false;
1011                         }
1012                 }
1013                 return true; // consider the file always locked and skip the test
1014         }
1015
1016         function make_lockfile($filename) {
1017                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1018
1019                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1020                         if (function_exists('posix_getpid')) {
1021                                 fwrite($fp, posix_getpid() . "\n");
1022                         }
1023                         return $fp;
1024                 } else {
1025                         return false;
1026                 }
1027         }
1028
1029         function make_stampfile($filename) {
1030                 $fp = fopen(LOCK_DIRECTORY . "/$filename", "w");
1031
1032                 if (flock($fp, LOCK_EX | LOCK_NB)) {
1033                         fwrite($fp, time() . "\n");
1034                         flock($fp, LOCK_UN);
1035                         fclose($fp);
1036                         return true;
1037                 } else {
1038                         return false;
1039                 }
1040         }
1041
1042         function sql_random_function() {
1043                 if (DB_TYPE == "mysql") {
1044                         return "RAND()";
1045                 } else {
1046                         return "RANDOM()";
1047                 }
1048         }
1049
1050         function catchup_feed($link, $feed, $cat_view, $owner_uid = false, $max_id = false) {
1051
1052                         if (!$owner_uid) $owner_uid = $_SESSION['uid'];
1053
1054                         //if (preg_match("/^-?[0-9][0-9]*$/", $feed) != false) {
1055
1056                         $ref_check_qpart = ($max_id &&
1057                                 !get_pref($link, 'REVERSE_HEADLINES')) ? "ref_id <= '$max_id'" : "true";
1058
1059                         if (is_numeric($feed)) {
1060                                 if ($cat_view) {
1061
1062                                         if ($feed >= 0) {
1063
1064                                                 if ($feed > 0) {
1065                                                         $children = getChildCategories($link, $feed, $owner_uid);
1066                                                         array_push($children, $feed);
1067
1068                                                         $children = join(",", $children);
1069
1070                                                         $cat_qpart = "cat_id IN ($children)";
1071                                                 } else {
1072                                                         $cat_qpart = "cat_id IS NULL";
1073                                                 }
1074
1075                                                 db_query($link, "UPDATE ttrss_user_entries
1076                                                         SET unread = false,last_read = NOW()
1077                                                         WHERE feed_id IN (SELECT id FROM ttrss_feeds WHERE $cat_qpart)
1078                                                         AND $ref_check_qpart
1079                                                         AND owner_uid = $owner_uid");
1080
1081                                         } else if ($feed == -2) {
1082
1083                                                 db_query($link, "UPDATE ttrss_user_entries
1084                                                         SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*)
1085                                                                 FROM ttrss_user_labels2 WHERE article_id = ref_id) > 0
1086                                                                 AND $ref_check_qpart
1087                                                                 AND unread = true AND owner_uid = $owner_uid");
1088                                         }
1089
1090                                 } else if ($feed > 0) {
1091
1092                                         db_query($link, "UPDATE ttrss_user_entries
1093                                                         SET unread = false,last_read = NOW()
1094                                                         WHERE feed_id = '$feed'
1095                                                         AND $ref_check_qpart
1096                                                         AND owner_uid = $owner_uid");
1097
1098                                 } else if ($feed < 0 && $feed > -10) { // special, like starred
1099
1100                                         if ($feed == -1) {
1101                                                 db_query($link, "UPDATE ttrss_user_entries
1102                                                         SET unread = false,last_read = NOW()
1103                                                         WHERE marked = true
1104                                                         AND $ref_check_qpart
1105                                                         AND owner_uid = $owner_uid");
1106                                         }
1107
1108                                         if ($feed == -2) {
1109                                                 db_query($link, "UPDATE ttrss_user_entries
1110                                                         SET unread = false,last_read = NOW()
1111                                                         WHERE published = true
1112                                                         AND $ref_check_qpart
1113                                                         AND owner_uid = $owner_uid");
1114                                         }
1115
1116                                         if ($feed == -3) {
1117
1118                                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE");
1119
1120                                                 if (DB_TYPE == "pgsql") {
1121                                                         $match_part = "updated > NOW() - INTERVAL '$intl hour' ";
1122                                                 } else {
1123                                                         $match_part = "updated > DATE_SUB(NOW(),
1124                                                                 INTERVAL $intl HOUR) ";
1125                                                 }
1126
1127                                                 $result = db_query($link, "SELECT id FROM ttrss_entries,
1128                                                         ttrss_user_entries WHERE $match_part AND
1129                                                         unread = true AND
1130                                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
1131                                                         owner_uid = $owner_uid");
1132
1133                                                 $affected_ids = array();
1134
1135                                                 while ($line = db_fetch_assoc($result)) {
1136                                                         array_push($affected_ids, $line["id"]);
1137                                                 }
1138
1139                                                 catchupArticlesById($link, $affected_ids, 0);
1140                                         }
1141
1142                                         if ($feed == -4) {
1143                                                 db_query($link, "UPDATE ttrss_user_entries
1144                                                         SET unread = false,last_read = NOW()
1145                                                         WHERE $ref_check_qpart AND owner_uid = $owner_uid");
1146                                         }
1147
1148                                 } else if ($feed < -10) { // label
1149
1150                                         $label_id = -$feed - 11;
1151
1152                                         db_query($link, "UPDATE ttrss_user_entries, ttrss_user_labels2
1153                                                 SET unread = false, last_read = NOW()
1154                                                         WHERE label_id = '$label_id' AND unread = true
1155                                                         AND $ref_check_qpart
1156                                                         AND owner_uid = '$owner_uid' AND ref_id = article_id");
1157
1158                                 }
1159
1160                                 ccache_update($link, $feed, $owner_uid, $cat_view);
1161
1162                         } else { // tag
1163                                 db_query($link, "BEGIN");
1164
1165                                 $tag_name = db_escape_string($feed);
1166
1167                                 $result = db_query($link, "SELECT post_int_id FROM ttrss_tags
1168                                         WHERE tag_name = '$tag_name' AND owner_uid = $owner_uid");
1169
1170                                 while ($line = db_fetch_assoc($result)) {
1171                                         db_query($link, "UPDATE ttrss_user_entries SET
1172                                                 unread = false, last_read = NOW()
1173                                                 WHERE $ref_check_qpart AND int_id = " . $line["post_int_id"]);
1174                                 }
1175                                 db_query($link, "COMMIT");
1176                         }
1177         }
1178
1179         function getAllCounters($link, $omode = "flc", $active_feed = false) {
1180
1181                 if (!$omode) $omode = "flc";
1182
1183                 $data = getGlobalCounters($link);
1184
1185                 $data = array_merge($data, getVirtCounters($link));
1186
1187                 if (strchr($omode, "l")) $data = array_merge($data, getLabelCounters($link));
1188                 if (strchr($omode, "f")) $data = array_merge($data, getFeedCounters($link, $active_feed));
1189                 if (strchr($omode, "t")) $data = array_merge($data, getTagCounters($link));
1190                 if (strchr($omode, "c")) $data = array_merge($data, getCategoryCounters($link));
1191
1192                 return $data;
1193         }
1194
1195         function getCategoryTitle($link, $cat_id) {
1196
1197                 if ($cat_id == -1) {
1198                         return __("Special");
1199                 } else if ($cat_id == -2) {
1200                         return __("Labels");
1201                 } else {
1202
1203                         $result = db_query($link, "SELECT title FROM ttrss_feed_categories WHERE
1204                                 id = '$cat_id'");
1205
1206                         if (db_num_rows($result) == 1) {
1207                                 return db_fetch_result($result, 0, "title");
1208                         } else {
1209                                 return __("Uncategorized");
1210                         }
1211                 }
1212         }
1213
1214
1215         function getCategoryCounters($link) {
1216                 $ret_arr = array();
1217
1218                 /* Labels category */
1219
1220                 $cv = array("id" => -2, "kind" => "cat",
1221                         "counter" => getCategoryUnread($link, -2));
1222
1223                 array_push($ret_arr, $cv);
1224
1225                 $result = db_query($link, "SELECT id AS cat_id, value AS unread,
1226                         (SELECT COUNT(id) FROM ttrss_feed_categories AS c2
1227                                 WHERE c2.parent_cat = ttrss_feed_categories.id) AS num_children
1228                         FROM ttrss_feed_categories, ttrss_cat_counters_cache
1229                         WHERE ttrss_cat_counters_cache.feed_id = id AND
1230                         ttrss_cat_counters_cache.owner_uid = ttrss_feed_categories.owner_uid AND
1231                         ttrss_feed_categories.owner_uid = " . $_SESSION["uid"]);
1232
1233                 while ($line = db_fetch_assoc($result)) {
1234                         $line["cat_id"] = (int) $line["cat_id"];
1235
1236                         if ($line["num_children"] > 0) {
1237                                 $child_counter = getCategoryChildrenUnread($link, $line["cat_id"], $_SESSION["uid"]);
1238                         } else {
1239                                 $child_counter = 0;
1240                         }
1241
1242                         $cv = array("id" => $line["cat_id"], "kind" => "cat",
1243                                 "counter" => $line["unread"] + $child_counter);
1244
1245                         array_push($ret_arr, $cv);
1246                 }
1247
1248                 /* Special case: NULL category doesn't actually exist in the DB */
1249
1250                 $cv = array("id" => 0, "kind" => "cat",
1251                         "counter" => (int) ccache_find($link, 0, $_SESSION["uid"], true));
1252
1253                 array_push($ret_arr, $cv);
1254
1255                 return $ret_arr;
1256         }
1257
1258         // only accepts real cats (>= 0)
1259         function getCategoryChildrenUnread($link, $cat, $owner_uid = false) {
1260                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1261
1262                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories WHERE parent_cat = '$cat'
1263                                 AND owner_uid = $owner_uid");
1264
1265                 $unread = 0;
1266
1267                 while ($line = db_fetch_assoc($result)) {
1268                         $unread += getCategoryUnread($link, $line["id"], $owner_uid);
1269                         $unread += getCategoryChildrenUnread($link, $line["id"], $owner_uid);
1270                 }
1271
1272                 return $unread;
1273         }
1274
1275         function getCategoryUnread($link, $cat, $owner_uid = false) {
1276
1277                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1278
1279                 if ($cat >= 0) {
1280
1281                         if ($cat != 0) {
1282                                 $cat_query = "cat_id = '$cat'";
1283                         } else {
1284                                 $cat_query = "cat_id IS NULL";
1285                         }
1286
1287                         $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $cat_query
1288                                         AND owner_uid = " . $owner_uid);
1289
1290                         $cat_feeds = array();
1291                         while ($line = db_fetch_assoc($result)) {
1292                                 array_push($cat_feeds, "feed_id = " . $line["id"]);
1293                         }
1294
1295                         if (count($cat_feeds) == 0) return 0;
1296
1297                         $match_part = implode(" OR ", $cat_feeds);
1298
1299                         $result = db_query($link, "SELECT COUNT(int_id) AS unread
1300                                 FROM ttrss_user_entries
1301                                 WHERE   unread = true AND ($match_part)
1302                                 AND owner_uid = " . $owner_uid);
1303
1304                         $unread = 0;
1305
1306                         # this needs to be rewritten
1307                         while ($line = db_fetch_assoc($result)) {
1308                                 $unread += $line["unread"];
1309                         }
1310
1311                         return $unread;
1312                 } else if ($cat == -1) {
1313                         return getFeedUnread($link, -1) + getFeedUnread($link, -2) + getFeedUnread($link, -3) + getFeedUnread($link, 0);
1314                 } else if ($cat == -2) {
1315
1316                         $result = db_query($link, "
1317                                 SELECT COUNT(unread) AS unread FROM
1318                                         ttrss_user_entries, ttrss_user_labels2
1319                                 WHERE article_id = ref_id AND unread = true
1320                                         AND ttrss_user_entries.owner_uid = '$owner_uid'");
1321
1322                         $unread = db_fetch_result($result, 0, "unread");
1323
1324                         return $unread;
1325
1326                 }
1327         }
1328
1329         function getFeedUnread($link, $feed, $is_cat = false) {
1330                 return getFeedArticles($link, $feed, $is_cat, true, $_SESSION["uid"]);
1331         }
1332
1333         function getLabelUnread($link, $label_id, $owner_uid = false) {
1334                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1335
1336                 $result = db_query($link, "SELECT COUNT(ref_id) AS unread FROM ttrss_user_entries, ttrss_user_labels2
1337                         WHERE owner_uid = '$owner_uid' AND unread = true AND label_id = '$label_id' AND article_id = ref_id");
1338
1339                 if (db_num_rows($result) != 0) {
1340                         return db_fetch_result($result, 0, "unread");
1341                 } else {
1342                         return 0;
1343                 }
1344         }
1345
1346         function getFeedArticles($link, $feed, $is_cat = false, $unread_only = false,
1347                 $owner_uid = false) {
1348
1349                 $n_feed = (int) $feed;
1350                 $need_entries = false;
1351
1352                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
1353
1354                 if ($unread_only) {
1355                         $unread_qpart = "unread = true";
1356                 } else {
1357                         $unread_qpart = "true";
1358                 }
1359
1360                 if ($is_cat) {
1361                         return getCategoryUnread($link, $n_feed, $owner_uid);
1362                 } else if ($n_feed == -6) {
1363                         return 0;
1364                 } else if ($feed != "0" && $n_feed == 0) {
1365
1366                         $feed = db_escape_string($feed);
1367
1368                         $result = db_query($link, "SELECT SUM((SELECT COUNT(int_id)
1369                                 FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1370                                         AND ref_id = id AND $unread_qpart)) AS count FROM ttrss_tags
1371                                 WHERE owner_uid = $owner_uid AND tag_name = '$feed'");
1372                         return db_fetch_result($result, 0, "count");
1373
1374                 } else if ($n_feed == -1) {
1375                         $match_part = "marked = true";
1376                 } else if ($n_feed == -2) {
1377                         $match_part = "published = true";
1378                 } else if ($n_feed == -3) {
1379                         $match_part = "unread = true AND score >= 0";
1380
1381                         $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
1382
1383                         if (DB_TYPE == "pgsql") {
1384                                 $match_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
1385                         } else {
1386                                 $match_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
1387                         }
1388
1389                         $need_entries = true;
1390
1391                 } else if ($n_feed == -4) {
1392                         $match_part = "true";
1393                 } else if ($n_feed >= 0) {
1394
1395                         if ($n_feed != 0) {
1396                                 $match_part = "feed_id = '$n_feed'";
1397                         } else {
1398                                 $match_part = "feed_id IS NULL";
1399                         }
1400
1401                 } else if ($feed < -10) {
1402
1403                         $label_id = -$feed - 11;
1404
1405                         return getLabelUnread($link, $label_id, $owner_uid);
1406
1407                 }
1408
1409                 if ($match_part) {
1410
1411                         if ($need_entries) {
1412                                 $from_qpart = "ttrss_user_entries,ttrss_entries";
1413                                 $from_where = "ttrss_entries.id = ttrss_user_entries.ref_id AND";
1414                         } else {
1415                                 $from_qpart = "ttrss_user_entries";
1416                         }
1417
1418                         $query = "SELECT count(int_id) AS unread
1419                                 FROM $from_qpart WHERE
1420                                 $unread_qpart AND $from_where ($match_part) AND ttrss_user_entries.owner_uid = $owner_uid";
1421
1422                         //echo "[$feed/$query]\n";
1423
1424                         $result = db_query($link, $query);
1425
1426                 } else {
1427
1428                         $result = db_query($link, "SELECT COUNT(post_int_id) AS unread
1429                                 FROM ttrss_tags,ttrss_user_entries,ttrss_entries
1430                                 WHERE tag_name = '$feed' AND post_int_id = int_id AND ref_id = ttrss_entries.id
1431                                 AND $unread_qpart AND ttrss_tags.owner_uid = " . $owner_uid);
1432                 }
1433
1434                 $unread = db_fetch_result($result, 0, "unread");
1435
1436                 return $unread;
1437         }
1438
1439         function getGlobalUnread($link, $user_id = false) {
1440
1441                 if (!$user_id) {
1442                         $user_id = $_SESSION["uid"];
1443                 }
1444
1445                 $result = db_query($link, "SELECT SUM(value) AS c_id FROM ttrss_counters_cache
1446                         WHERE owner_uid = '$user_id' AND feed_id > 0");
1447
1448                 $c_id = db_fetch_result($result, 0, "c_id");
1449
1450                 return $c_id;
1451         }
1452
1453         function getGlobalCounters($link, $global_unread = -1) {
1454                 $ret_arr = array();
1455
1456                 if ($global_unread == -1) {
1457                         $global_unread = getGlobalUnread($link);
1458                 }
1459
1460                 $cv = array("id" => "global-unread",
1461                         "counter" => (int) $global_unread);
1462
1463                 array_push($ret_arr, $cv);
1464
1465                 $result = db_query($link, "SELECT COUNT(id) AS fn FROM
1466                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1467
1468                 $subscribed_feeds = db_fetch_result($result, 0, "fn");
1469
1470                 $cv = array("id" => "subscribed-feeds",
1471                         "counter" => (int) $subscribed_feeds);
1472
1473                 array_push($ret_arr, $cv);
1474
1475                 return $ret_arr;
1476         }
1477
1478         function getTagCounters($link) {
1479
1480                 $ret_arr = array();
1481
1482                 $result = db_query($link, "SELECT tag_name,SUM((SELECT COUNT(int_id)
1483                         FROM ttrss_user_entries,ttrss_entries WHERE int_id = post_int_id
1484                                 AND ref_id = id AND unread = true)) AS count FROM ttrss_tags
1485                                 WHERE owner_uid = ".$_SESSION['uid']." GROUP BY tag_name
1486                                 ORDER BY count DESC LIMIT 55");
1487
1488                 $tags = array();
1489
1490                 while ($line = db_fetch_assoc($result)) {
1491                         $tags[$line["tag_name"]] += $line["count"];
1492                 }
1493
1494                 foreach (array_keys($tags) as $tag) {
1495                         $unread = $tags[$tag];
1496                         $tag = htmlspecialchars($tag);
1497
1498                         $cv = array("id" => $tag,
1499                                 "kind" => "tag",
1500                                 "counter" => $unread);
1501
1502                         array_push($ret_arr, $cv);
1503                 }
1504
1505                 return $ret_arr;
1506         }
1507
1508         function getVirtCounters($link) {
1509
1510                 $ret_arr = array();
1511
1512                 for ($i = 0; $i >= -4; $i--) {
1513
1514                         $count = getFeedUnread($link, $i);
1515
1516                         $cv = array("id" => $i,
1517                                 "counter" => (int) $count);
1518
1519 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1520 //                              $cv["xmsg"] = getFeedArticles($link, $i)." ".__("total");
1521
1522                         array_push($ret_arr, $cv);
1523                 }
1524
1525                 return $ret_arr;
1526         }
1527
1528         function getLabelCounters($link, $descriptions = false) {
1529
1530                 $ret_arr = array();
1531
1532                 $owner_uid = $_SESSION["uid"];
1533
1534                 $result = db_query($link, "SELECT id, caption FROM ttrss_labels2
1535                         WHERE owner_uid = '$owner_uid'");
1536
1537                 while ($line = db_fetch_assoc($result)) {
1538
1539                         $id = -$line["id"] - 11;
1540
1541                         $label_name = $line["caption"];
1542                         $count = getFeedUnread($link, $id);
1543
1544                         $cv = array("id" => $id,
1545                                 "counter" => (int) $count);
1546
1547                         if ($descriptions)
1548                                 $cv["description"] = $label_name;
1549
1550 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1551 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1552
1553                         array_push($ret_arr, $cv);
1554                 }
1555
1556                 return $ret_arr;
1557         }
1558
1559         function getFeedCounters($link, $active_feed = false) {
1560
1561                 $ret_arr = array();
1562
1563                 $query = "SELECT ttrss_feeds.id,
1564                                 ttrss_feeds.title,
1565                                 ".SUBSTRING_FOR_DATE."(ttrss_feeds.last_updated,1,19) AS last_updated,
1566                                 last_error, value AS count
1567                         FROM ttrss_feeds, ttrss_counters_cache
1568                         WHERE ttrss_feeds.owner_uid = ".$_SESSION["uid"]."
1569                                 AND ttrss_counters_cache.owner_uid = ttrss_feeds.owner_uid
1570                                 AND ttrss_counters_cache.feed_id = id";
1571
1572                 $result = db_query($link, $query);
1573                 $fctrs_modified = false;
1574
1575                 while ($line = db_fetch_assoc($result)) {
1576
1577                         $id = $line["id"];
1578                         $count = $line["count"];
1579                         $last_error = htmlspecialchars($line["last_error"]);
1580
1581                         $last_updated = make_local_datetime($link, $line['last_updated'], false);
1582
1583                         $has_img = feed_has_icon($id);
1584
1585                         if (date('Y') - date('Y', strtotime($line['last_updated'])) > 2)
1586                                 $last_updated = '';
1587
1588                         $cv = array("id" => $id,
1589                                 "updated" => $last_updated,
1590                                 "counter" => (int) $count,
1591                                 "has_img" => (int) $has_img);
1592
1593                         if ($last_error)
1594                                 $cv["error"] = $last_error;
1595
1596 //                      if (get_pref($link, 'EXTENDED_FEEDLIST'))
1597 //                              $cv["xmsg"] = getFeedArticles($link, $id)." ".__("total");
1598
1599                         if ($active_feed && $id == $active_feed)
1600                                 $cv["title"] = truncate_string($line["title"], 30);
1601
1602                         array_push($ret_arr, $cv);
1603
1604                 }
1605
1606                 return $ret_arr;
1607         }
1608
1609         function get_pgsql_version($link) {
1610                 $result = db_query($link, "SELECT version() AS version");
1611                 $version = explode(" ", db_fetch_result($result, 0, "version"));
1612                 return $version[1];
1613         }
1614
1615         /**
1616          * @return array (code => Status code, message => error message if available)
1617          *
1618          *                 0 - OK, Feed already exists
1619          *                 1 - OK, Feed added
1620          *                 2 - Invalid URL
1621          *                 3 - URL content is HTML, no feeds available
1622          *                 4 - URL content is HTML which contains multiple feeds.
1623          *                     Here you should call extractfeedurls in rpc-backend
1624          *                     to get all possible feeds.
1625          *                 5 - Couldn't download the URL content.
1626          */
1627         function subscribe_to_feed($link, $url, $cat_id = 0,
1628                         $auth_login = '', $auth_pass = '', $need_auth = false) {
1629
1630                 global $fetch_last_error;
1631
1632                 require_once "include/rssfuncs.php";
1633
1634                 $url = fix_url($url);
1635
1636                 if (!$url || !validate_feed_url($url)) return array("code" => 2);
1637
1638                 $contents = @fetch_file_contents($url, false, $auth_login, $auth_pass);
1639
1640                 if (!$contents) {
1641                         return array("code" => 5, "message" => $fetch_last_error);
1642                 }
1643
1644                 if (is_html($contents)) {
1645                         $feedUrls = get_feeds_from_html($url, $contents);
1646
1647                         if (count($feedUrls) == 0) {
1648                                 return array("code" => 3);
1649                         } else if (count($feedUrls) > 1) {
1650                                 return array("code" => 4, "feeds" => $feedUrls);
1651                         }
1652                         //use feed url as new URL
1653                         $url = key($feedUrls);
1654                 }
1655
1656                 if ($cat_id == "0" || !$cat_id) {
1657                         $cat_qpart = "NULL";
1658                 } else {
1659                         $cat_qpart = "'$cat_id'";
1660                 }
1661
1662                 $result = db_query($link,
1663                         "SELECT id FROM ttrss_feeds
1664                         WHERE feed_url = '$url' AND owner_uid = ".$_SESSION["uid"]);
1665
1666                 if (db_num_rows($result) == 0) {
1667                         $result = db_query($link,
1668                                 "INSERT INTO ttrss_feeds
1669                                         (owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method)
1670                                 VALUES ('".$_SESSION["uid"]."', '$url',
1671                                 '[Unknown]', $cat_qpart, '$auth_login', '$auth_pass', 0)");
1672
1673                         $result = db_query($link,
1674                                 "SELECT id FROM ttrss_feeds WHERE feed_url = '$url'
1675                                         AND owner_uid = " . $_SESSION["uid"]);
1676
1677                         $feed_id = db_fetch_result($result, 0, "id");
1678
1679                         if ($feed_id) {
1680                                 update_rss_feed($link, $feed_id, true);
1681                         }
1682
1683                         return array("code" => 1);
1684                 } else {
1685                         return array("code" => 0);
1686                 }
1687         }
1688
1689         function print_feed_select($link, $id, $default_id = "",
1690                 $attributes = "", $include_all_feeds = true,
1691                 $root_id = false, $nest_level = 0) {
1692
1693                 if (!$root_id) {
1694                         print "<select id=\"$id\" name=\"$id\" $attributes>";
1695                         if ($include_all_feeds) {
1696                                 $is_selected = ("0" == $default_id) ? "selected=\"1\"" : "";
1697                                 print "<option $is_selected value=\"0\">".__('All feeds')."</option>";
1698                         }
1699                 }
1700
1701                 if (get_pref($link, 'ENABLE_FEED_CATS')) {
1702
1703                         if ($root_id)
1704                                 $parent_qpart = "parent_cat = '$root_id'";
1705                         else
1706                                 $parent_qpart = "parent_cat IS NULL";
1707
1708                         $result = db_query($link, "SELECT id,title,
1709                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1710                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1711                                 FROM ttrss_feed_categories
1712                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1713
1714                         while ($line = db_fetch_assoc($result)) {
1715
1716                                 for ($i = 0; $i < $nest_level; $i++)
1717                                         $line["title"] = " - " . $line["title"];
1718
1719                                 $is_selected = ("CAT:".$line["id"] == $default_id) ? "selected=\"1\"" : "";
1720
1721                                 printf("<option $is_selected value='CAT:%d'>%s</option>",
1722                                         $line["id"], htmlspecialchars($line["title"]));
1723
1724                                 if ($line["num_children"] > 0)
1725                                         print_feed_select($link, $id, $default_id, $attributes,
1726                                                 $include_all_feeds, $line["id"], $nest_level+1);
1727
1728                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1729                                         WHERE cat_id = '".$line["id"]."' AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1730
1731                                 while ($fline = db_fetch_assoc($feed_result)) {
1732                                         $is_selected = ($fline["id"] == $default_id) ? "selected=\"1\"" : "";
1733
1734                                         $fline["title"] = " + " . $fline["title"];
1735
1736                                         for ($i = 0; $i < $nest_level; $i++)
1737                                                 $fline["title"] = " - " . $fline["title"];
1738
1739                                         printf("<option $is_selected value='%d'>%s</option>",
1740                                                 $fline["id"], htmlspecialchars($fline["title"]));
1741                                 }
1742                         }
1743
1744                         if (!$root_id) {
1745                                 $is_selected = ($default_id == "CAT:0") ? "selected=\"1\"" : "";
1746
1747                                 printf("<option $is_selected value='CAT:0'>%s</option>",
1748                                         __("Uncategorized"));
1749
1750                                 $feed_result = db_query($link, "SELECT id,title FROM ttrss_feeds
1751                                         WHERE cat_id IS NULL AND owner_uid = ".$_SESSION["uid"] . " ORDER BY title");
1752
1753                                 while ($fline = db_fetch_assoc($feed_result)) {
1754                                         $is_selected = ($fline["id"] == $default_id && !$default_is_cat) ? "selected=\"1\"" : "";
1755
1756                                         $fline["title"] = " + " . $fline["title"];
1757
1758                                         for ($i = 0; $i < $nest_level; $i++)
1759                                                 $fline["title"] = " - " . $fline["title"];
1760
1761                                         printf("<option $is_selected value='%d'>%s</option>",
1762                                                 $fline["id"], htmlspecialchars($fline["title"]));
1763                                 }
1764                         }
1765
1766                 } else {
1767                         $result = db_query($link, "SELECT id,title FROM ttrss_feeds
1768                                 WHERE owner_uid = ".$_SESSION["uid"]." ORDER BY title");
1769
1770                         while ($line = db_fetch_assoc($result)) {
1771
1772                                 $is_selected = ($line["id"] == $default_id) ? "selected=\"1\"" : "";
1773
1774                                 printf("<option $is_selected value='%d'>%s</option>",
1775                                         $line["id"], htmlspecialchars($line["title"]));
1776                         }
1777                 }
1778
1779                 if (!$root_id) {
1780                         print "</select>";
1781                 }
1782         }
1783
1784         function print_feed_cat_select($link, $id, $default_id,
1785                 $attributes, $include_all_cats = true, $root_id = false, $nest_level = 0) {
1786
1787                         if (!$root_id) {
1788                                         print "<select id=\"$id\" name=\"$id\" default=\"$default_id\" onchange=\"catSelectOnChange(this)\" $attributes>";
1789                         }
1790
1791                         if ($root_id)
1792                                 $parent_qpart = "parent_cat = '$root_id'";
1793                         else
1794                                 $parent_qpart = "parent_cat IS NULL";
1795
1796                         $result = db_query($link, "SELECT id,title,
1797                                 (SELECT COUNT(id) FROM ttrss_feed_categories AS c2 WHERE
1798                                         c2.parent_cat = ttrss_feed_categories.id) AS num_children
1799                                 FROM ttrss_feed_categories
1800                                 WHERE owner_uid = ".$_SESSION["uid"]." AND $parent_qpart ORDER BY title");
1801
1802                         while ($line = db_fetch_assoc($result)) {
1803                                 if ($line["id"] == $default_id) {
1804                                         $is_selected = "selected=\"1\"";
1805                                 } else {
1806                                         $is_selected = "";
1807                                 }
1808
1809                                 for ($i = 0; $i < $nest_level; $i++)
1810                                         $line["title"] = " - " . $line["title"];
1811
1812                                 if ($line["title"])
1813                                         printf("<option $is_selected value='%d'>%s</option>",
1814                                                 $line["id"], htmlspecialchars($line["title"]));
1815
1816                                 if ($line["num_children"] > 0)
1817                                         print_feed_cat_select($link, $id, $default_id, $attributes,
1818                                                 $include_all_cats, $line["id"], $nest_level+1);
1819                         }
1820
1821                         if (!$root_id) {
1822                                 if ($include_all_cats) {
1823                                         if (db_num_rows($result) > 0) {
1824                                                 print "<option disabled=\"1\">--------</option>";
1825                                         }
1826
1827                                         if ($default_id == 0) {
1828                                                 $is_selected = "selected=\"1\"";
1829                                         } else {
1830                                                 $is_selected = "";
1831                                         }
1832
1833                                         print "<option $is_selected value=\"0\">".__('Uncategorized')."</option>";
1834                                 }
1835                                 print "</select>";
1836                         }
1837                 }
1838
1839         function checkbox_to_sql_bool($val) {
1840                 return ($val == "on") ? "true" : "false";
1841         }
1842
1843         function getFeedCatTitle($link, $id) {
1844                 if ($id == -1) {
1845                         return __("Special");
1846                 } else if ($id < -10) {
1847                         return __("Labels");
1848                 } else if ($id > 0) {
1849                         $result = db_query($link, "SELECT ttrss_feed_categories.title
1850                                 FROM ttrss_feeds, ttrss_feed_categories WHERE ttrss_feeds.id = '$id' AND
1851                                         cat_id = ttrss_feed_categories.id");
1852                         if (db_num_rows($result) == 1) {
1853                                 return db_fetch_result($result, 0, "title");
1854                         } else {
1855                                 return __("Uncategorized");
1856                         }
1857                 } else {
1858                         return "getFeedCatTitle($id) failed";
1859                 }
1860
1861         }
1862
1863         function getFeedIcon($id) {
1864                 switch ($id) {
1865                 case 0:
1866                         return "images/archive.png";
1867                         break;
1868                 case -1:
1869                         return "images/mark_set.svg";
1870                         break;
1871                 case -2:
1872                         return "images/pub_set.svg";
1873                         break;
1874                 case -3:
1875                         return "images/fresh.png";
1876                         break;
1877                 case -4:
1878                         return "images/tag.png";
1879                         break;
1880                 case -6:
1881                         return "images/recently_read.png";
1882                         break;
1883                 default:
1884                         if ($id < -10) {
1885                                 return "images/label.png";
1886                         } else {
1887                                 if (file_exists(ICONS_DIR . "/$id.ico"))
1888                                         return ICONS_URL . "/$id.ico";
1889                         }
1890                         break;
1891                 }
1892         }
1893
1894         function getFeedTitle($link, $id, $cat = false) {
1895                 if ($cat) {
1896                         return getCategoryTitle($link, $id);
1897                 } else if ($id == -1) {
1898                         return __("Starred articles");
1899                 } else if ($id == -2) {
1900                         return __("Published articles");
1901                 } else if ($id == -3) {
1902                         return __("Fresh articles");
1903                 } else if ($id == -4) {
1904                         return __("All articles");
1905                 } else if ($id === 0 || $id === "0") {
1906                         return __("Archived articles");
1907                 } else if ($id == -6) {
1908                         return __("Recently read");
1909                 } else if ($id < -10) {
1910                         $label_id = -$id - 11;
1911                         $result = db_query($link, "SELECT caption FROM ttrss_labels2 WHERE id = '$label_id'");
1912                         if (db_num_rows($result) == 1) {
1913                                 return db_fetch_result($result, 0, "caption");
1914                         } else {
1915                                 return "Unknown label ($label_id)";
1916                         }
1917
1918                 } else if (is_numeric($id) && $id > 0) {
1919                         $result = db_query($link, "SELECT title FROM ttrss_feeds WHERE id = '$id'");
1920                         if (db_num_rows($result) == 1) {
1921                                 return db_fetch_result($result, 0, "title");
1922                         } else {
1923                                 return "Unknown feed ($id)";
1924                         }
1925                 } else {
1926                         return $id;
1927                 }
1928         }
1929
1930         function make_init_params($link) {
1931                 $params = array();
1932
1933                 $params["theme"] = get_user_theme($link);
1934                 $params["theme_options"] = get_user_theme_options($link);
1935
1936                 $params["sign_progress"] = theme_image($link, "images/indicator_white.gif");
1937                 $params["sign_progress_tiny"] = theme_image($link, "images/indicator_tiny.gif");
1938                 $params["sign_excl"] = theme_image($link, "images/sign_excl.svg");
1939                 $params["sign_info"] = theme_image($link, "images/sign_info.svg");
1940
1941                 foreach (array("ON_CATCHUP_SHOW_NEXT_FEED", "HIDE_READ_FEEDS",
1942                         "ENABLE_FEED_CATS", "FEEDS_SORT_BY_UNREAD", "CONFIRM_FEED_CATCHUP",
1943                         "CDM_AUTO_CATCHUP", "FRESH_ARTICLE_MAX_AGE", "DEFAULT_ARTICLE_LIMIT",
1944                         "HIDE_READ_SHOWS_SPECIAL", "COMBINED_DISPLAY_MODE") as $param) {
1945
1946                                  $params[strtolower($param)] = (int) get_pref($link, $param);
1947                  }
1948
1949                 $params["icons_url"] = ICONS_URL;
1950                 $params["cookie_lifetime"] = SESSION_COOKIE_LIFETIME;
1951                 $params["default_view_mode"] = get_pref($link, "_DEFAULT_VIEW_MODE");
1952                 $params["default_view_limit"] = (int) get_pref($link, "_DEFAULT_VIEW_LIMIT");
1953                 $params["default_view_order_by"] = get_pref($link, "_DEFAULT_VIEW_ORDER_BY");
1954                 $params["bw_limit"] = (int) $_SESSION["bw_limit"];
1955
1956                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
1957                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
1958
1959                 $max_feed_id = db_fetch_result($result, 0, "mid");
1960                 $num_feeds = db_fetch_result($result, 0, "nf");
1961
1962                 $params["max_feed_id"] = (int) $max_feed_id;
1963                 $params["num_feeds"] = (int) $num_feeds;
1964
1965                 $params["collapsed_feedlist"] = (int) get_pref($link, "_COLLAPSED_FEEDLIST");
1966                 $params["hotkeys"] = get_hotkeys($link);
1967
1968                 $params["csrf_token"] = $_SESSION["csrf_token"];
1969
1970                 return $params;
1971         }
1972
1973         function get_hotkeys($link) {
1974                 $hotkeys = array(
1975                         "navigation" => array(
1976                                 "next_feed" => "k",
1977                                 "prev_feed" => "j",
1978                                 "next_article" => "n",
1979                                 "prev_article" => "p",
1980                                 "search_dialog" => "/"),
1981                         "article" => array(
1982                                 "toggle_mark" => "s",
1983                                 "toggle_publ" => "S",
1984                                 "toggle_unread" => "u",
1985                                 "edit_tags" => "T",
1986                                 "dismiss_selected" => "D",
1987                                 "dismiss_read" => "X",
1988                                 "open_in_new_window" => "o",
1989                                 "catchup_below" => "c p",
1990                                 "catchup_above" => "c n",
1991                                 "email_article" => "e"),
1992                         "article_selection" => array(
1993                                 "select_all" => "a a",
1994                                 "select_unread" => "a u",
1995                                 "select_marked" => "a U",
1996                                 "select_published" => "a p",
1997                                 "select_invert" => "a i",
1998                                 "select_none" => "a n"),
1999                         "feed" => array(
2000                                 "feed_refresh" => "f r",
2001                                 "feed_unhide_read" => "f a",
2002                                 "feed_subscribe" => "f s",
2003                                 "feed_edit" => "f e",
2004                                 "feed_catchup" => "f q",
2005                                 "feed_reverse" => "f x",
2006                                 "catchup_all" => "Q",
2007                                 "cat_toggle_collapse" => "x"),
2008                         "goto" => array(
2009                                 "goto_all" => "g a",
2010                                 "goto_fresh" => "g f",
2011                                 "goto_marked" => "g s",
2012                                 "goto_published" => "g p",
2013                                 "goto_tagcloud" => "g t",
2014                                 "goto_prefs" => "g P"),
2015                         "other" => array(
2016                                 "select_article_cursor" => "(9)", // tab
2017                                 "create_label" => "c l",
2018                                 "create_filter" => "c f",
2019                                 "collapse_sidebar" => "c s",
2020                                 "help_dialog" => "(191)")
2021                         );
2022
2023                 return $hotkeys;
2024         }
2025
2026         function make_runtime_info($link) {
2027                 $data = array();
2028
2029                 $result = db_query($link, "SELECT MAX(id) AS mid, COUNT(*) AS nf FROM
2030                         ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"]);
2031
2032                 $max_feed_id = db_fetch_result($result, 0, "mid");
2033                 $num_feeds = db_fetch_result($result, 0, "nf");
2034
2035                 $data["max_feed_id"] = (int) $max_feed_id;
2036                 $data["num_feeds"] = (int) $num_feeds;
2037
2038                 $data['last_article_id'] = getLastArticleId($link);
2039                 $data['cdm_expanded'] = get_pref($link, 'CDM_EXPANDED');
2040
2041                 if (file_exists(LOCK_DIRECTORY . "/update_daemon.lock")) {
2042
2043                         $data['daemon_is_running'] = (int) file_is_locked("update_daemon.lock");
2044
2045                         if (time() - $_SESSION["daemon_stamp_check"] > 30) {
2046
2047                                 $stamp = (int) @file_get_contents(LOCK_DIRECTORY . "/update_daemon.stamp");
2048
2049                                 if ($stamp) {
2050                                         $stamp_delta = time() - $stamp;
2051
2052                                         if ($stamp_delta > 1800) {
2053                                                 $stamp_check = 0;
2054                                         } else {
2055                                                 $stamp_check = 1;
2056                                                 $_SESSION["daemon_stamp_check"] = time();
2057                                         }
2058
2059                                         $data['daemon_stamp_ok'] = $stamp_check;
2060
2061                                         $stamp_fmt = date("Y.m.d, G:i", $stamp);
2062
2063                                         $data['daemon_stamp'] = $stamp_fmt;
2064                                 }
2065                         }
2066                 }
2067
2068                 if ($_SESSION["last_version_check"] + 86400 + rand(-1000, 1000) < time()) {
2069                                 $new_version_details = @check_for_update($link);
2070
2071                                 $data['new_version_available'] = (int) ($new_version_details != false);
2072
2073                                 $_SESSION["last_version_check"] = time();
2074                                 $_SESSION["version_data"] = $new_version_details;
2075                 }
2076
2077                 return $data;
2078         }
2079
2080         function search_to_sql($link, $search, $match_on) {
2081
2082                 $search_query_part = "";
2083
2084                 $keywords = explode(" ", $search);
2085                 $query_keywords = array();
2086
2087                 foreach ($keywords as $k) {
2088                         if (strpos($k, "-") === 0) {
2089                                 $k = substr($k, 1);
2090                                 $not = "NOT";
2091                         } else {
2092                                 $not = "";
2093                         }
2094
2095                         $commandpair = explode(":", mb_strtolower($k), 2);
2096
2097                         if ($commandpair[0] == "note" && $commandpair[1]) {
2098
2099                                 if ($commandpair[1] == "true")
2100                                         array_push($query_keywords, "($not (note IS NOT NULL AND note != ''))");
2101                                 else
2102                                         array_push($query_keywords, "($not (note IS NULL OR note = ''))");
2103
2104                         } else if ($commandpair[0] == "star" && $commandpair[1]) {
2105
2106                                 if ($commandpair[1] == "true")
2107                                         array_push($query_keywords, "($not (marked = true))");
2108                                 else
2109                                         array_push($query_keywords, "($not (marked = false))");
2110
2111                         } else if ($commandpair[0] == "pub" && $commandpair[1]) {
2112
2113                                 if ($commandpair[1] == "true")
2114                                         array_push($query_keywords, "($not (published = true))");
2115                                 else
2116                                         array_push($query_keywords, "($not (published = false))");
2117
2118                         } else if (strpos($k, "@") === 0) {
2119
2120                                 $user_tz_string = get_pref($link, 'USER_TIMEZONE', $_SESSION['uid']);
2121                                 $orig_ts = strtotime(substr($k, 1));
2122                                 $k = date("Y-m-d", convert_timestamp($orig_ts, $user_tz_string, 'UTC'));
2123
2124                                 //$k = date("Y-m-d", strtotime(substr($k, 1)));
2125
2126                                 array_push($query_keywords, "(".SUBSTRING_FOR_DATE."(updated,1,LENGTH('$k')) $not = '$k')");
2127                         } else if ($match_on == "both") {
2128                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%')
2129                                                 OR UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2130                         } else if ($match_on == "title") {
2131                                 array_push($query_keywords, "(UPPER(ttrss_entries.title) $not LIKE UPPER('%$k%'))");
2132                         } else if ($match_on == "content") {
2133                                 array_push($query_keywords, "(UPPER(ttrss_entries.content) $not LIKE UPPER('%$k%'))");
2134                         }
2135                 }
2136
2137                 $search_query_part = implode("AND", $query_keywords);
2138
2139                 return $search_query_part;
2140         }
2141
2142         function getParentCategories($link, $cat, $owner_uid) {
2143                 $rv = array();
2144
2145                 $result = db_query($link, "SELECT parent_cat FROM ttrss_feed_categories
2146                         WHERE id = '$cat' AND parent_cat IS NOT NULL AND owner_uid = $owner_uid");
2147
2148                 while ($line = db_fetch_assoc($result)) {
2149                         array_push($rv, $line["parent_cat"]);
2150                         $rv = array_merge($rv, getParentCategories($link, $line["parent_cat"], $owner_uid));
2151                 }
2152
2153                 return $rv;
2154         }
2155
2156         function getChildCategories($link, $cat, $owner_uid) {
2157                 $rv = array();
2158
2159                 $result = db_query($link, "SELECT id FROM ttrss_feed_categories
2160                         WHERE parent_cat = '$cat' AND owner_uid = $owner_uid");
2161
2162                 while ($line = db_fetch_assoc($result)) {
2163                         array_push($rv, $line["id"]);
2164                         $rv = array_merge($rv, getChildCategories($link, $line["id"], $owner_uid));
2165                 }
2166
2167                 return $rv;
2168         }
2169
2170         function queryFeedHeadlines($link, $feed, $limit, $view_mode, $cat_view, $search, $search_mode, $match_on, $override_order = false, $offset = 0, $owner_uid = 0, $filter = false, $since_id = 0, $include_children = false) {
2171
2172                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2173
2174                 $ext_tables_part = "";
2175
2176                         if ($search) {
2177
2178                                 if (SPHINX_ENABLED) {
2179                                         $ids = join(",", @sphinx_search($search, 0, 500));
2180
2181                                         if ($ids)
2182                                                 $search_query_part = "ref_id IN ($ids) AND ";
2183                                         else
2184                                                 $search_query_part = "ref_id = -1 AND ";
2185
2186                                 } else {
2187                                         $search_query_part = search_to_sql($link, $search, $match_on);
2188                                         $search_query_part .= " AND ";
2189                                 }
2190
2191                         } else {
2192                                 $search_query_part = "";
2193                         }
2194
2195                         if ($filter) {
2196
2197                                 if (DB_TYPE == "pgsql") {
2198                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '14 days' ";
2199                                 } else {
2200                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL 14 DAY) ";
2201                                 }
2202
2203                                 $override_order = "updated DESC";
2204
2205                                 $filter_query_part = filter_to_sql($link, $filter, $owner_uid);
2206
2207                                 // Try to check if SQL regexp implementation chokes on a valid regexp
2208                                 $result = db_query($link, "SELECT true AS true FROM ttrss_entries,
2209                                         ttrss_user_entries, ttrss_feeds, ttrss_feed_categories
2210                                         WHERE $filter_query_part LIMIT 1", false);
2211
2212                                 $test = db_fetch_result($result, 0, "true");
2213
2214                                 if (!$test) {
2215                                         $filter_query_part = "false AND";
2216                                 } else {
2217                                         $filter_query_part .= " AND";
2218                                 }
2219
2220                         } else {
2221                                 $filter_query_part = "";
2222                         }
2223
2224                         if ($since_id) {
2225                                 $since_id_part = "ttrss_entries.id > $since_id AND ";
2226                         } else {
2227                                 $since_id_part = "";
2228                         }
2229
2230                         $view_query_part = "";
2231
2232                         if ($view_mode == "adaptive" || $view_query_part == "noscores") {
2233                                 if ($search) {
2234                                         $view_query_part = " ";
2235                                 } else if ($feed != -1) {
2236                                         $unread = getFeedUnread($link, $feed, $cat_view);
2237
2238                                         if ($cat_view && $feed > 0 && $include_children)
2239                                                 $unread += getCategoryChildrenUnread($link, $feed);
2240
2241                                         if ($unread > 0) {
2242                                                 $view_query_part = " unread = true AND ";
2243                                         }
2244                                 }
2245                         }
2246
2247                         if ($view_mode == "marked") {
2248                                 $view_query_part = " marked = true AND ";
2249                         }
2250
2251                         if ($view_mode == "published") {
2252                                 $view_query_part = " published = true AND ";
2253                         }
2254
2255                         if ($view_mode == "unread") {
2256                                 $view_query_part = " unread = true AND ";
2257                         }
2258
2259                         if ($view_mode == "updated") {
2260                                 $view_query_part = " (last_read is null and unread = false) AND ";
2261                         }
2262
2263                         if ($limit > 0) {
2264                                 $limit_query_part = "LIMIT " . $limit;
2265                         }
2266
2267                         $allow_archived = false;
2268
2269                         $vfeed_query_part = "";
2270
2271                         // override query strategy and enable feed display when searching globally
2272                         if ($search && $search_mode == "all_feeds") {
2273                                 $query_strategy_part = "true";
2274                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2275                         /* tags */
2276                         } else if (!is_numeric($feed)) {
2277                                 $query_strategy_part = "true";
2278                                 $vfeed_query_part = "(SELECT title FROM ttrss_feeds WHERE
2279                                         id = feed_id) as feed_title,";
2280                         } else if ($search && $search_mode == "this_cat") {
2281                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2282
2283                                 if ($feed > 0) {
2284                                         if ($include_children) {
2285                                                 $subcats = getChildCategories($link, $feed, $owner_uid);
2286                                                 array_push($subcats, $feed);
2287                                                 $cats_qpart = join(",", $subcats);
2288                                         } else {
2289                                                 $cats_qpart = $feed;
2290                                         }
2291
2292                                         $query_strategy_part = "ttrss_feeds.cat_id IN ($cats_qpart)";
2293
2294                                 } else {
2295                                         $query_strategy_part = "ttrss_feeds.cat_id IS NULL";
2296                                 }
2297
2298                         } else if ($feed > 0) {
2299
2300                                 if ($cat_view) {
2301
2302                                         if ($feed > 0) {
2303                                                 if ($include_children) {
2304                                                         # sub-cats
2305                                                         $subcats = getChildCategories($link, $feed, $owner_uid);
2306
2307                                                         array_push($subcats, $feed);
2308                                                         $query_strategy_part = "cat_id IN (".
2309                                                                         implode(",", $subcats).")";
2310
2311                                                 } else {
2312                                                         $query_strategy_part = "cat_id = '$feed'";
2313                                                 }
2314
2315                                         } else {
2316                                                 $query_strategy_part = "cat_id IS NULL";
2317                                         }
2318
2319                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2320
2321                                 } else {
2322                                         $query_strategy_part = "feed_id = '$feed'";
2323                                 }
2324                         } else if ($feed == 0 && !$cat_view) { // archive virtual feed
2325                                 $query_strategy_part = "feed_id IS NULL";
2326                                 $allow_archived = true;
2327                         } else if ($feed == 0 && $cat_view) { // uncategorized
2328                                 $query_strategy_part = "cat_id IS NULL AND feed_id IS NOT NULL";
2329                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2330                         } else if ($feed == -1) { // starred virtual feed
2331                                 $query_strategy_part = "marked = true";
2332                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2333                                 $allow_archived = true;
2334
2335                         } else if ($feed == -2) { // published virtual feed OR labels category
2336
2337                                 if (!$cat_view) {
2338                                         $query_strategy_part = "published = true";
2339                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2340                                         $allow_archived = true;
2341
2342                                         if (!$override_order) $override_order = "last_read DESC, updated DESC";
2343                                 } else {
2344                                         $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2345
2346                                         $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2347
2348                                         $query_strategy_part = "ttrss_labels2.id = ttrss_user_labels2.label_id AND
2349                                                 ttrss_user_labels2.article_id = ref_id";
2350
2351                                 }
2352                         } else if ($feed == -6) { // recently read
2353                                 $query_strategy_part = "unread = false AND last_read IS NOT NULL";
2354                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2355                                 $allow_archived = true;
2356
2357                                 if (!$override_order) $override_order = "last_read DESC";
2358                         } else if ($feed == -3) { // fresh virtual feed
2359                                 $query_strategy_part = "unread = true AND score >= 0";
2360
2361                                 $intl = get_pref($link, "FRESH_ARTICLE_MAX_AGE", $owner_uid);
2362
2363                                 if (DB_TYPE == "pgsql") {
2364                                         $query_strategy_part .= " AND updated > NOW() - INTERVAL '$intl hour' ";
2365                                 } else {
2366                                         $query_strategy_part .= " AND updated > DATE_SUB(NOW(), INTERVAL $intl HOUR) ";
2367                                 }
2368
2369                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2370                         } else if ($feed == -4) { // all articles virtual feed
2371                                 $query_strategy_part = "true";
2372                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2373                         } else if ($feed <= -10) { // labels
2374                                 $label_id = -$feed - 11;
2375
2376                                 $query_strategy_part = "label_id = '$label_id' AND
2377                                         ttrss_labels2.id = ttrss_user_labels2.label_id AND
2378                                         ttrss_user_labels2.article_id = ref_id";
2379
2380                                 $vfeed_query_part = "ttrss_feeds.title AS feed_title,";
2381                                 $ext_tables_part = ",ttrss_labels2,ttrss_user_labels2";
2382                                 $allow_archived = true;
2383
2384                         } else {
2385                                 $query_strategy_part = "true";
2386                         }
2387
2388                         if (get_pref($link, "SORT_HEADLINES_BY_FEED_DATE", $owner_uid)) {
2389                                 $date_sort_field = "updated";
2390                         } else {
2391                                 $date_sort_field = "date_entered";
2392                         }
2393
2394                         if (get_pref($link, 'REVERSE_HEADLINES', $owner_uid)) {
2395                                 $order_by = "$date_sort_field";
2396                         } else {
2397                                 $order_by = "$date_sort_field DESC";
2398                         }
2399
2400                         if ($view_mode != "noscores") {
2401                                 $order_by = "score DESC, $order_by";
2402                         }
2403
2404                         if ($override_order) {
2405                                 $order_by = $override_order;
2406                         }
2407
2408                         $feed_title = "";
2409
2410                         if ($search) {
2411                                 $feed_title = T_sprintf("Search results: %s", $search);
2412                         } else {
2413                                 if ($cat_view) {
2414                                         $feed_title = getCategoryTitle($link, $feed);
2415                                 } else {
2416                                         if (is_numeric($feed) && $feed > 0) {
2417                                                 $result = db_query($link, "SELECT title,site_url,last_error
2418                                                         FROM ttrss_feeds WHERE id = '$feed' AND owner_uid = $owner_uid");
2419
2420                                                 $feed_title = db_fetch_result($result, 0, "title");
2421                                                 $feed_site_url = db_fetch_result($result, 0, "site_url");
2422                                                 $last_error = db_fetch_result($result, 0, "last_error");
2423                                         } else {
2424                                                 $feed_title = getFeedTitle($link, $feed);
2425                                         }
2426                                 }
2427                         }
2428
2429                         $content_query_part = "content as content_preview, cached_content, ";
2430
2431                         if (is_numeric($feed)) {
2432
2433                                 if ($feed >= 0) {
2434                                         $feed_kind = "Feeds";
2435                                 } else {
2436                                         $feed_kind = "Labels";
2437                                 }
2438
2439                                 if ($limit_query_part) {
2440                                         $offset_query_part = "OFFSET $offset";
2441                                 }
2442
2443                                 // proper override_order applied above
2444                                 if ($vfeed_query_part && get_pref($link, 'VFEED_GROUP_BY_FEED', $owner_uid)) {
2445                                         if (!$override_order) {
2446                                                 $order_by = "ttrss_feeds.title, $order_by";
2447                                         } else {
2448                                                 $order_by = "ttrss_feeds.title, $override_order";
2449                                         }
2450                                 }
2451
2452                                 if (!$allow_archived) {
2453                                         $from_qpart = "ttrss_entries,ttrss_user_entries,ttrss_feeds$ext_tables_part";
2454                                         $feed_check_qpart = "ttrss_user_entries.feed_id = ttrss_feeds.id AND";
2455
2456                                 } else {
2457                                         $from_qpart = "ttrss_entries$ext_tables_part,ttrss_user_entries
2458                                                 LEFT JOIN ttrss_feeds ON (feed_id = ttrss_feeds.id)";
2459                                 }
2460
2461                                 $query = "SELECT DISTINCT
2462                                                 date_entered,
2463                                                 guid,
2464                                                 ttrss_entries.id,ttrss_entries.title,
2465                                                 updated,
2466                                                 label_cache,
2467                                                 tag_cache,
2468                                                 always_display_enclosures,
2469                                                 site_url,
2470                                                 note,
2471                                                 num_comments,
2472                                                 comments,
2473                                                 int_id,
2474                                                 unread,feed_id,marked,published,link,last_read,orig_feed_id,
2475                                                 ".SUBSTRING_FOR_DATE."(last_read,1,19) as last_read_noms,
2476                                                 $vfeed_query_part
2477                                                 $content_query_part
2478                                                 ".SUBSTRING_FOR_DATE."(updated,1,19) as updated_noms,
2479                                                 author,score
2480                                         FROM
2481                                                 $from_qpart
2482                                         WHERE
2483                                         $feed_check_qpart
2484                                         ttrss_user_entries.ref_id = ttrss_entries.id AND
2485                                         ttrss_user_entries.owner_uid = '$owner_uid' AND
2486                                         $search_query_part
2487                                         $filter_query_part
2488                                         $view_query_part
2489                                         $since_id_part
2490                                         $query_strategy_part ORDER BY $order_by
2491                                         $limit_query_part $offset_query_part";
2492
2493                                 if ($_REQUEST["debug"]) print $query;
2494
2495                                 $result = db_query($link, $query);
2496
2497                         } else {
2498                                 // browsing by tag
2499
2500                                 $select_qpart = "SELECT DISTINCT " .
2501                                                                 "date_entered," .
2502                                                                 "guid," .
2503                                                                 "note," .
2504                                                                 "ttrss_entries.id as id," .
2505                                                                 "title," .
2506                                                                 "updated," .
2507                                                                 "unread," .
2508                                                                 "feed_id," .
2509                                                                 "orig_feed_id," .
2510                                                                 "marked," .
2511                                                                 "num_comments, " .
2512                                                                 "comments, " .
2513                                                                 "tag_cache," .
2514                                                                 "label_cache," .
2515                                                                 "link," .
2516                                                                 "last_read," .
2517                                                                 SUBSTRING_FOR_DATE . "(last_read,1,19) as last_read_noms," .
2518                                                                 $since_id_part .
2519                                                                 $vfeed_query_part .
2520                                                                 $content_query_part .
2521                                                                 SUBSTRING_FOR_DATE . "(updated,1,19) as updated_noms," .
2522                                                                 "score ";
2523
2524                                 $feed_kind = "Tags";
2525                                 $all_tags = explode(",", $feed);
2526                                 if ($search_mode == 'any') {
2527                                         $tag_sql = "tag_name in (" . implode(", ", array_map("db_quote", $all_tags)) . ")";
2528                                         $from_qpart = " FROM ttrss_entries,ttrss_user_entries,ttrss_tags ";
2529                                         $where_qpart = " WHERE " .
2530                                                                    "ref_id = ttrss_entries.id AND " .
2531                                                                    "ttrss_user_entries.owner_uid = $owner_uid AND " .
2532                                                                    "post_int_id = int_id AND $tag_sql AND " .
2533                                                                    $view_query_part .
2534                                                                    $search_query_part .
2535                                                                    $query_strategy_part . " ORDER BY $order_by " .
2536                                                                    $limit_query_part;
2537
2538                                 } else {
2539                                         $i = 1;
2540                                         $sub_selects = array();
2541                                         $sub_ands = array();
2542                                         foreach ($all_tags as $term) {
2543                                                 array_push($sub_selects, "(SELECT post_int_id from ttrss_tags WHERE tag_name = " . db_quote($term) . " AND owner_uid = $owner_uid) as A$i");
2544                                                 $i++;
2545                                         }
2546                                         if ($i > 2) {
2547                                                 $x = 1;
2548                                                 $y = 2;
2549                                                 do {
2550                                                         array_push($sub_ands, "A$x.post_int_id = A$y.post_int_id");
2551                                                         $x++;
2552                                                         $y++;
2553                                                 } while ($y < $i);
2554                                         }
2555                                         array_push($sub_ands, "A1.post_int_id = ttrss_user_entries.int_id and ttrss_user_entries.owner_uid = $owner_uid");
2556                                         array_push($sub_ands, "ttrss_user_entries.ref_id = ttrss_entries.id");
2557                                         $from_qpart = " FROM " . implode(", ", $sub_selects) . ", ttrss_user_entries, ttrss_entries";
2558                                         $where_qpart = " WHERE " . implode(" AND ", $sub_ands);
2559                                 }
2560                                 //                              error_log("TAG SQL: " . $tag_sql);
2561                                 // $tag_sql = "tag_name = '$feed'";   DEFAULT way
2562
2563                                 //                              error_log("[". $select_qpart . "][" . $from_qpart . "][" .$where_qpart . "]");
2564                                 $result = db_query($link, $select_qpart . $from_qpart . $where_qpart);
2565                         }
2566
2567                         return array($result, $feed_title, $feed_site_url, $last_error);
2568
2569         }
2570
2571         function sanitize($link, $str, $force_strip_tags = false, $owner = false, $site_url = false) {
2572                 if (!$owner) $owner = $_SESSION["uid"];
2573
2574                 $res = trim($str); if (!$res) return '';
2575
2576                 $config = array('safe' => 1, 'deny_attribute' => 'style, width, height, class, id', 'comment' => 1, 'cdata' => 1, 'balance' => 0);
2577                 $res = htmLawed($res, $config);
2578
2579                 if (get_pref($link, "STRIP_IMAGES", $owner)) {
2580                         $res = preg_replace('/<img[^>]+>/is', '', $res);
2581                 }
2582
2583                 if (strpos($res, "href=") === false)
2584                         $res = rewrite_urls($res);
2585
2586                 $charset_hack = '<head>
2587                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
2588                 </head>';
2589
2590                 $res = trim($res); if (!$res) return '';
2591
2592                 libxml_use_internal_errors(true);
2593
2594                 $doc = new DOMDocument();
2595                 $doc->loadHTML($charset_hack . $res);
2596                 $xpath = new DOMXPath($doc);
2597
2598                 $entries = $xpath->query('(//a[@href]|//img[@src])');
2599                 $br_inserted = 0;
2600
2601                 foreach ($entries as $entry) {
2602
2603                         if ($site_url) {
2604
2605                                 if ($entry->hasAttribute('href'))
2606                                         $entry->setAttribute('href',
2607                                                 rewrite_relative_url($site_url, $entry->getAttribute('href')));
2608
2609                                 if ($entry->hasAttribute('src'))
2610                                         if (preg_match('/^image.php\?i=[a-z0-9]+$/', $entry->getAttribute('src')) == 0)
2611                                                 $entry->setAttribute('src',
2612                                                         rewrite_relative_url($site_url, $entry->getAttribute('src')));
2613                         }
2614
2615                         if (strtolower($entry->nodeName) == "a") {
2616                                 $entry->setAttribute("target", "_blank");
2617                         }
2618
2619                         if (strtolower($entry->nodeName) == "img" && !$br_inserted) {
2620                                 $br = $doc->createElement("br");
2621
2622                                 if ($entry->parentNode->nextSibling) {
2623                                         $entry->parentNode->insertBefore($br, $entry->nextSibling);
2624                                         $br_inserted = 1;
2625                                 }
2626
2627                         }
2628                 }
2629
2630                 $node = $doc->getElementsByTagName('body')->item(0);
2631
2632                 // http://tt-rss.org/redmine/issues/357
2633                 return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
2634         }
2635
2636         function check_for_update($link) {
2637                 if (CHECK_FOR_NEW_VERSION && $_SESSION['access_level'] >= 10) {
2638                         $version_url = "http://tt-rss.org/version.php?ver=" . VERSION;
2639
2640                         $version_data = @fetch_file_contents($version_url);
2641
2642                         if ($version_data) {
2643                                 $version_data = json_decode($version_data, true);
2644                                 if ($version_data && $version_data['version']) {
2645
2646                                         if (version_compare(VERSION, $version_data['version']) == -1) {
2647                                                 return $version_data;
2648                                         }
2649                                 }
2650                         }
2651                 }
2652                 return false;
2653         }
2654
2655         function markArticlesById($link, $ids, $cmode) {
2656
2657                 $tmp_ids = array();
2658
2659                 foreach ($ids as $id) {
2660                         array_push($tmp_ids, "ref_id = '$id'");
2661                 }
2662
2663                 $ids_qpart = join(" OR ", $tmp_ids);
2664
2665                 if ($cmode == 0) {
2666                         db_query($link, "UPDATE ttrss_user_entries SET
2667                         marked = false,last_read = NOW()
2668                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2669                 } else if ($cmode == 1) {
2670                         db_query($link, "UPDATE ttrss_user_entries SET
2671                         marked = true
2672                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2673                 } else {
2674                         db_query($link, "UPDATE ttrss_user_entries SET
2675                         marked = NOT marked,last_read = NOW()
2676                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2677                 }
2678         }
2679
2680         function publishArticlesById($link, $ids, $cmode) {
2681
2682                 $tmp_ids = array();
2683
2684                 foreach ($ids as $id) {
2685                         array_push($tmp_ids, "ref_id = '$id'");
2686                 }
2687
2688                 $ids_qpart = join(" OR ", $tmp_ids);
2689
2690                 if ($cmode == 0) {
2691                         db_query($link, "UPDATE ttrss_user_entries SET
2692                         published = false,last_read = NOW()
2693                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2694                 } else if ($cmode == 1) {
2695                         db_query($link, "UPDATE ttrss_user_entries SET
2696                         published = true,last_read = NOW()
2697                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2698                 } else {
2699                         db_query($link, "UPDATE ttrss_user_entries SET
2700                         published = NOT published,last_read = NOW()
2701                         WHERE ($ids_qpart) AND owner_uid = " . $_SESSION["uid"]);
2702                 }
2703
2704                 if (PUBSUBHUBBUB_HUB) {
2705                         $rss_link = get_self_url_prefix() .
2706                                 "/public.php?op=rss&id=-2&key=" .
2707                                 get_feed_access_key($link, -2, false);
2708
2709                         $p = new Publisher(PUBSUBHUBBUB_HUB);
2710
2711                         $pubsub_result = $p->publish_update($rss_link);
2712                 }
2713         }
2714
2715         function catchupArticlesById($link, $ids, $cmode, $owner_uid = false) {
2716
2717                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2718                 if (count($ids) == 0) return;
2719
2720                 $tmp_ids = array();
2721
2722                 foreach ($ids as $id) {
2723                         array_push($tmp_ids, "ref_id = '$id'");
2724                 }
2725
2726                 $ids_qpart = join(" OR ", $tmp_ids);
2727
2728                 if ($cmode == 0) {
2729                         db_query($link, "UPDATE ttrss_user_entries SET
2730                         unread = false,last_read = NOW()
2731                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2732                 } else if ($cmode == 1) {
2733                         db_query($link, "UPDATE ttrss_user_entries SET
2734                         unread = true
2735                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2736                 } else {
2737                         db_query($link, "UPDATE ttrss_user_entries SET
2738                         unread = NOT unread,last_read = NOW()
2739                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2740                 }
2741
2742                 /* update ccache */
2743
2744                 $result = db_query($link, "SELECT DISTINCT feed_id FROM ttrss_user_entries
2745                         WHERE ($ids_qpart) AND owner_uid = $owner_uid");
2746
2747                 while ($line = db_fetch_assoc($result)) {
2748                         ccache_update($link, $line["feed_id"], $owner_uid);
2749                 }
2750         }
2751
2752         function catchupArticleById($link, $id, $cmode) {
2753
2754                 if ($cmode == 0) {
2755                         db_query($link, "UPDATE ttrss_user_entries SET
2756                         unread = false,last_read = NOW()
2757                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
2758                 } else if ($cmode == 1) {
2759                         db_query($link, "UPDATE ttrss_user_entries SET
2760                         unread = true
2761                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
2762                 } else {
2763                         db_query($link, "UPDATE ttrss_user_entries SET
2764                         unread = NOT unread,last_read = NOW()
2765                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
2766                 }
2767
2768                 $feed_id = getArticleFeed($link, $id);
2769                 ccache_update($link, $feed_id, $_SESSION["uid"]);
2770         }
2771
2772         function make_guid_from_title($title) {
2773                 return preg_replace("/[ \"\',.:;]/", "-",
2774                         mb_strtolower(strip_tags($title), 'utf-8'));
2775         }
2776
2777         function get_article_tags($link, $id, $owner_uid = 0, $tag_cache = false) {
2778
2779                 $a_id = db_escape_string($id);
2780
2781                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2782
2783                 $query = "SELECT DISTINCT tag_name,
2784                         owner_uid as owner FROM
2785                         ttrss_tags WHERE post_int_id = (SELECT int_id FROM ttrss_user_entries WHERE
2786                         ref_id = '$a_id' AND owner_uid = '$owner_uid' LIMIT 1) ORDER BY tag_name";
2787
2788                 $obj_id = md5("TAGS:$owner_uid:$id");
2789                 $tags = array();
2790
2791                 /* check cache first */
2792
2793                 if ($tag_cache === false) {
2794                         $result = db_query($link, "SELECT tag_cache FROM ttrss_user_entries
2795                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2796
2797                         $tag_cache = db_fetch_result($result, 0, "tag_cache");
2798                 }
2799
2800                 if ($tag_cache) {
2801                         $tags = explode(",", $tag_cache);
2802                 } else {
2803
2804                         /* do it the hard way */
2805
2806                         $tmp_result = db_query($link, $query);
2807
2808                         while ($tmp_line = db_fetch_assoc($tmp_result)) {
2809                                 array_push($tags, $tmp_line["tag_name"]);
2810                         }
2811
2812                         /* update the cache */
2813
2814                         $tags_str = db_escape_string(join(",", $tags));
2815
2816                         db_query($link, "UPDATE ttrss_user_entries
2817                                 SET tag_cache = '$tags_str' WHERE ref_id = '$id'
2818                                 AND owner_uid = $owner_uid");
2819                 }
2820
2821                 return $tags;
2822         }
2823
2824         function trim_array($array) {
2825                 $tmp = $array;
2826                 array_walk($tmp, 'trim');
2827                 return $tmp;
2828         }
2829
2830         function tag_is_valid($tag) {
2831                 if ($tag == '') return false;
2832                 if (preg_match("/^[0-9]*$/", $tag)) return false;
2833                 if (mb_strlen($tag) > 250) return false;
2834
2835                 if (function_exists('iconv')) {
2836                         $tag = iconv("utf-8", "utf-8", $tag);
2837                 }
2838
2839                 if (!$tag) return false;
2840
2841                 return true;
2842         }
2843
2844         function render_login_form($link, $form_id = 0) {
2845                 switch ($form_id) {
2846                 case 0:
2847                         require_once "login_form.php";
2848                         break;
2849                 case 1:
2850                         require_once "mobile/login_form.php";
2851                         break;
2852                 }
2853                 exit;
2854         }
2855
2856         // from http://developer.apple.com/internet/safari/faq.html
2857         function no_cache_incantation() {
2858                 header("Expires: Mon, 22 Dec 1980 00:00:00 GMT"); // Happy birthday to me :)
2859                 header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
2860                 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); // HTTP/1.1
2861                 header("Cache-Control: post-check=0, pre-check=0", false);
2862                 header("Pragma: no-cache"); // HTTP/1.0
2863         }
2864
2865         function format_warning($msg, $id = "") {
2866                 global $link;
2867                 return "<div class=\"warning\" id=\"$id\">
2868                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2869         }
2870
2871         function format_notice($msg, $id = "") {
2872                 global $link;
2873                 return "<div class=\"notice\" id=\"$id\">
2874                         <img src=\"".theme_image($link, "images/sign_info.svg")."\">$msg</div>";
2875         }
2876
2877         function format_error($msg, $id = "") {
2878                 global $link;
2879                 return "<div class=\"error\" id=\"$id\">
2880                         <img src=\"".theme_image($link, "images/sign_excl.svg")."\">$msg</div>";
2881         }
2882
2883         function print_notice($msg) {
2884                 return print format_notice($msg);
2885         }
2886
2887         function print_warning($msg) {
2888                 return print format_warning($msg);
2889         }
2890
2891         function print_error($msg) {
2892                 return print format_error($msg);
2893         }
2894
2895
2896         function T_sprintf() {
2897                 $args = func_get_args();
2898                 return vsprintf(__(array_shift($args)), $args);
2899         }
2900
2901         function format_inline_player($link, $url, $ctype) {
2902
2903                 $entry = "";
2904
2905                 if (strpos($ctype, "audio/") === 0) {
2906
2907                         if ($_SESSION["hasAudio"] && (strpos($ctype, "ogg") !== false ||
2908                                 strpos($_SERVER['HTTP_USER_AGENT'], "Chrome") !== false ||
2909                                 strpos($_SERVER['HTTP_USER_AGENT'], "Safari") !== false )) {
2910
2911                                 $id = 'AUDIO-' . uniqid();
2912
2913                                 $entry .= "<audio id=\"$id\"\">
2914                                         <source src=\"$url\"></source>
2915                                         </audio>";
2916
2917                                 $entry .= "<span onclick=\"player(this)\"
2918                                         title=\"".__("Click to play")."\" status=\"0\"
2919                                         class=\"player\" audio-id=\"$id\">".__("Play")."</span>";
2920
2921                         } else {
2922
2923                                 $entry .= "<object type=\"application/x-shockwave-flash\"
2924                                         data=\"lib/button/musicplayer.swf?song_url=$url\"
2925                                         width=\"17\" height=\"17\" style='float : left; margin-right : 5px;'>
2926                                         <param name=\"movie\"
2927                                                 value=\"lib/button/musicplayer.swf?song_url=$url\" />
2928                                         </object>";
2929                         }
2930                 }
2931
2932                 $filename = substr($url, strrpos($url, "/")+1);
2933
2934                 $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
2935                         $filename . " (" . $ctype . ")" . "</a>";
2936
2937                 return $entry;
2938         }
2939
2940         function format_article($link, $id, $mark_as_read = true, $zoom_mode = false, $owner_uid = false) {
2941                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
2942
2943                 $rv = array();
2944
2945                 $rv['id'] = $id;
2946
2947                 /* we can figure out feed_id from article id anyway, why do we
2948                  * pass feed_id here? let's ignore the argument :( */
2949
2950                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
2951                         WHERE ref_id = '$id'");
2952
2953                 $feed_id = (int) db_fetch_result($result, 0, "feed_id");
2954
2955                 $rv['feed_id'] = $feed_id;
2956
2957                 //if (!$zoom_mode) { print "<article id='$id'><![CDATA["; };
2958
2959                 $result = db_query($link, "SELECT rtl_content, always_display_enclosures, cache_content FROM ttrss_feeds
2960                         WHERE id = '$feed_id' AND owner_uid = $owner_uid");
2961
2962                 if (db_num_rows($result) == 1) {
2963                         $rtl_content = sql_bool_to_bool(db_fetch_result($result, 0, "rtl_content"));
2964                         $always_display_enclosures = sql_bool_to_bool(db_fetch_result($result, 0, "always_display_enclosures"));
2965                         $cache_content = sql_bool_to_bool(db_fetch_result($result, 0, "cache_content"));
2966                 } else {
2967                         $rtl_content = false;
2968                         $always_display_enclosures = false;
2969                         $cache_content = false;
2970                 }
2971
2972                 if ($rtl_content) {
2973                         $rtl_tag = "dir=\"RTL\"";
2974                         $rtl_class = "RTL";
2975                 } else {
2976                         $rtl_tag = "";
2977                         $rtl_class = "";
2978                 }
2979
2980                 if ($mark_as_read) {
2981                         $result = db_query($link, "UPDATE ttrss_user_entries
2982                                 SET unread = false,last_read = NOW()
2983                                 WHERE ref_id = '$id' AND owner_uid = $owner_uid");
2984
2985                         ccache_update($link, $feed_id, $owner_uid);
2986                 }
2987
2988                 $result = db_query($link, "SELECT id,title,link,content,feed_id,comments,int_id,
2989                         ".SUBSTRING_FOR_DATE."(updated,1,16) as updated,
2990                         (SELECT icon_url FROM ttrss_feeds WHERE id = feed_id) as icon_url,
2991                         (SELECT site_url FROM ttrss_feeds WHERE id = feed_id) as site_url,
2992                         num_comments,
2993                         tag_cache,
2994                         author,
2995                         orig_feed_id,
2996                         note,
2997                         cached_content
2998                         FROM ttrss_entries,ttrss_user_entries
2999                         WHERE   id = '$id' AND ref_id = id AND owner_uid = $owner_uid");
3000
3001                 if ($result) {
3002
3003                         $line = db_fetch_assoc($result);
3004
3005                         if ($line["icon_url"]) {
3006                                 $feed_icon = "<img src=\"" . $line["icon_url"] . "\">";
3007                         } else {
3008                                 $feed_icon = "&nbsp;";
3009                         }
3010
3011                         $feed_site_url = $line['site_url'];
3012
3013                         $num_comments = $line["num_comments"];
3014                         $entry_comments = "";
3015
3016                         if ($num_comments > 0) {
3017                                 if ($line["comments"]) {
3018                                         $comments_url = htmlspecialchars($line["comments"]);
3019                                 } else {
3020                                         $comments_url = htmlspecialchars($line["link"]);
3021                                 }
3022                                 $entry_comments = "<a target='_blank' href=\"$comments_url\">$num_comments comments</a>";
3023                         } else {
3024                                 if ($line["comments"] && $line["link"] != $line["comments"]) {
3025                                         $entry_comments = "<a target='_blank' href=\"".htmlspecialchars($line["comments"])."\">comments</a>";
3026                                 }
3027                         }
3028
3029                         if ($zoom_mode) {
3030                                 header("Content-Type: text/html");
3031                                 $rv['content'] .= "<html><head>
3032                                                 <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>
3033                                                 <title>Tiny Tiny RSS - ".$line["title"]."</title>
3034                                                 <link rel=\"stylesheet\" type=\"text/css\" href=\"tt-rss.css\">
3035                                         </head><body>";
3036                         }
3037
3038                         $title_escaped = htmlspecialchars($line['title']);
3039
3040                         $rv['content'] .= "<div id=\"PTITLE-$id\" style=\"display : none\">" .
3041                                 truncate_string(strip_tags($line['title']), 15) . "</div>";
3042
3043                         $rv['content'] .= "<div id=\"PTITLE-FULL-$id\" style=\"display : none\">" .
3044                                 strip_tags($line['title']) . "</div>";
3045
3046                         $rv['content'] .= "<div class=\"postReply\" id=\"POST-$id\">";
3047
3048                         $rv['content'] .= "<div onclick=\"return postClicked(event, $id)\"
3049                                 class=\"postHeader\" id=\"POSTHDR-$id\">";
3050
3051                         $entry_author = $line["author"];
3052
3053                         if ($entry_author) {
3054                                 $entry_author = __(" - ") . $entry_author;
3055                         }
3056
3057                         $parsed_updated = make_local_datetime($link, $line["updated"], true,
3058                                 $owner_uid, true);
3059
3060                         $rv['content'] .= "<div class=\"postDate$rtl_class\">$parsed_updated</div>";
3061
3062                         if ($line["link"]) {
3063                                 $rv['content'] .= "<div class='postTitle'><a target='_blank'
3064                                         title=\"".htmlspecialchars($line['title'])."\"
3065                                         href=\"" .
3066                                         htmlspecialchars($line["link"]) . "\">" .
3067                                         $line["title"] .
3068                                         "<span class='author'>$entry_author</span></a></div>";
3069                         } else {
3070                                 $rv['content'] .= "<div class='postTitle'>" . $line["title"] . "$entry_author</div>";
3071                         }
3072
3073                         $tag_cache = $line["tag_cache"];
3074
3075                         if (!$tag_cache)
3076                                 $tags = get_article_tags($link, $id, $owner_uid);
3077                         else
3078                                 $tags = explode(",", $tag_cache);
3079
3080                         $tags_str = format_tags_string($tags, $id);
3081                         $tags_str_full = join(", ", $tags);
3082
3083                         if (!$tags_str_full) $tags_str_full = __("no tags");
3084
3085                         if (!$entry_comments) $entry_comments = "&nbsp;"; # placeholder
3086
3087                         $rv['content'] .= "<div class='postTags' style='float : right'>
3088                                 <img src='".theme_image($link, 'images/tag.png')."'
3089                                 class='tagsPic' alt='Tags' title='Tags'>&nbsp;";
3090
3091                         if (!$zoom_mode) {
3092                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>
3093                                         <a title=\"".__('Edit tags for this article')."\"
3094                                         href=\"#\" onclick=\"editArticleTags($id, $feed_id)\">(+)</a>";
3095
3096                                 $rv['content'] .= "<div dojoType=\"dijit.Tooltip\"
3097                                         id=\"ATSTRTIP-$id\" connectId=\"ATSTR-$id\"
3098                                         position=\"below\">$tags_str_full</div>";
3099
3100                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/art-zoom.png')."\"
3101                                                 class='tagsPic' style=\"cursor : pointer\"
3102                                                 onclick=\"postOpenInNewTab(event, $id)\"
3103                                                 alt='Zoom' title='".__('Open article in new tab')."'>";
3104
3105                                 global $pluginhost;
3106
3107                                 foreach ($pluginhost->get_hooks($pluginhost::HOOK_ARTICLE_BUTTON) as $p) {
3108                                         $rv['content'] .= $p->hook_article_button($line);
3109                                 }
3110
3111                                 $rv['content'] .= "<img src=\"".theme_image($link, 'images/digest_checkbox.png')."\"
3112                                                 class='tagsPic' style=\"cursor : pointer\"
3113                                                 onclick=\"closeArticlePanel($id)\"
3114                                                 title='".__('Close article')."'>";
3115
3116                         } else {
3117                                 $tags_str = strip_tags($tags_str);
3118                                 $rv['content'] .= "<span id=\"ATSTR-$id\">$tags_str</span>";
3119                         }
3120                         $rv['content'] .= "</div>";
3121                         $rv['content'] .= "<div clear='both'>$entry_comments</div>";
3122
3123                         if ($line["orig_feed_id"]) {
3124
3125                                 $tmp_result = db_query($link, "SELECT * FROM ttrss_archived_feeds
3126                                         WHERE id = ".$line["orig_feed_id"]);
3127
3128                                 if (db_num_rows($tmp_result) != 0) {
3129
3130                                         $rv['content'] .= "<div clear='both'>";
3131                                         $rv['content'] .= __("Originally from:");
3132
3133                                         $rv['content'] .= "&nbsp;";
3134
3135                                         $tmp_line = db_fetch_assoc($tmp_result);
3136
3137                                         $rv['content'] .= "<a target='_blank'
3138                                                 href=' " . htmlspecialchars($tmp_line['site_url']) . "'>" .
3139                                                 $tmp_line['title'] . "</a>";
3140
3141                                         $rv['content'] .= "&nbsp;";
3142
3143                                         $rv['content'] .= "<a target='_blank' href='" . htmlspecialchars($tmp_line['feed_url']) . "'>";
3144                                         $rv['content'] .= "<img title='".__('Feed URL')."'class='tinyFeedIcon' src='images/pub_set.svg'></a>";
3145
3146                                         $rv['content'] .= "</div>";
3147                                 }
3148                         }
3149
3150                         $rv['content'] .= "</div>";
3151
3152                         $rv['content'] .= "<div id=\"POSTNOTE-$id\">";
3153                                 if ($line['note']) {
3154                                         $rv['content'] .= format_article_note($id, $line['note']);
3155                                 }
3156                         $rv['content'] .= "</div>";
3157
3158                         $rv['content'] .= "<div class=\"postIcon\">" .
3159                                 "<a target=\"_blank\" title=\"".__("Visit the website")."\"$
3160                                 href=\"".htmlspecialchars($feed_site_url)."\">".
3161                                 $feed_icon . "</a></div>";
3162
3163                         $rv['content'] .= "<div class=\"postContent\">";
3164
3165                         // N-grams
3166
3167                         if (DB_TYPE == "pgsql" and defined('_NGRAM_TITLE_RELATED_THRESHOLD')) {
3168
3169                                 $ngram_result = db_query($link, "SELECT id,title FROM
3170                                                 ttrss_entries,ttrss_user_entries
3171                                         WHERE ref_id = id AND updated >= NOW() - INTERVAL '7 day'
3172                                                 AND similarity(title, '$title_escaped') >= "._NGRAM_TITLE_RELATED_THRESHOLD."
3173                                                 AND title != '$title_escaped'
3174                                                 AND owner_uid = $owner_uid");
3175
3176                                 if (db_num_rows($ngram_result) > 0) {
3177                                         $rv['content'] .= "<div dojoType=\"dijit.form.DropDownButton\">".
3178                                                 "<span>" . __('Related')."</span>";
3179                                         $rv['content'] .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
3180
3181                                         while ($nline = db_fetch_assoc($ngram_result)) {
3182                                                 $rv['content'] .= "<div onclick=\"hlOpenInNewTab(null,".$nline['id'].")\"
3183                                                         dojoType=\"dijit.MenuItem\">".$nline['title']."</div>";
3184
3185                                         }
3186                                         $rv['content'] .= "</div></div><br/";
3187                                 }
3188                         }
3189
3190                         if ($cache_content && $line["cached_content"] != "") {
3191                                 $line["content"] =& $line["cached_content"];
3192                         }
3193
3194                         $article_content = sanitize($link, $line["content"], false, $owner_uid,
3195                                 $feed_site_url);
3196
3197                         $rv['content'] .= $article_content;
3198
3199                         $rv['content'] .= format_article_enclosures($link, $id,
3200                                 $always_display_enclosures, $article_content);
3201
3202                         $rv['content'] .= "</div>";
3203
3204                         $rv['content'] .= "</div>";
3205
3206                 }
3207
3208                 if ($zoom_mode) {
3209                         $rv['content'] .= "
3210                                 <div style=\"text-align : center\">
3211                                 <button onclick=\"return window.close()\">".
3212                                         __("Close this window")."</button></div>";
3213                         $rv['content'] .= "</body></html>";
3214                 }
3215
3216                 return $rv;
3217
3218         }
3219
3220         function print_checkpoint($n, $s) {
3221                 $ts = getmicrotime();
3222                 echo sprintf("<!-- CP[$n] %.4f seconds -->", $ts - $s);
3223                 return $ts;
3224         }
3225
3226         function sanitize_tag($tag) {
3227                 $tag = trim($tag);
3228
3229                 $tag = mb_strtolower($tag, 'utf-8');
3230
3231                 $tag = preg_replace('/[\'\"\+\>\<]/', "", $tag);
3232
3233 //              $tag = str_replace('"', "", $tag);
3234 //              $tag = str_replace("+", " ", $tag);
3235                 $tag = str_replace("technorati tag: ", "", $tag);
3236
3237                 return $tag;
3238         }
3239
3240         function get_self_url_prefix() {
3241                 if (strrpos(SELF_URL_PATH, "/") === strlen(SELF_URL_PATH)-1) {
3242                         return substr(SELF_URL_PATH, 0, strlen(SELF_URL_PATH)-1);
3243                 } else {
3244                         return SELF_URL_PATH;
3245                 }
3246         }
3247
3248         function opml_publish_url($link){
3249
3250                 $url_path = get_self_url_prefix();
3251                 $url_path .= "/opml.php?op=publish&key=" .
3252                         get_feed_access_key($link, 'OPML:Publish', false, $_SESSION["uid"]);
3253
3254                 return $url_path;
3255         }
3256
3257         /**
3258          * Purge a feed contents, marked articles excepted.
3259          *
3260          * @param mixed $link The database connection.
3261          * @param integer $id The id of the feed to purge.
3262          * @return void
3263          */
3264         function clear_feed_articles($link, $id) {
3265
3266                 if ($id != 0) {
3267                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3268                         WHERE feed_id = '$id' AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3269                 } else {
3270                         $result = db_query($link, "DELETE FROM ttrss_user_entries
3271                         WHERE feed_id IS NULL AND marked = false AND owner_uid = " . $_SESSION["uid"]);
3272                 }
3273
3274                 $result = db_query($link, "DELETE FROM ttrss_entries WHERE
3275                         (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");
3276
3277                 ccache_update($link, $id, $_SESSION['uid']);
3278         } // function clear_feed_articles
3279
3280         /**
3281          * Compute the Mozilla Firefox feed adding URL from server HOST and REQUEST_URI.
3282          *
3283          * @return string The Mozilla Firefox feed adding URL.
3284          */
3285         function add_feed_url() {
3286                 //$url_path = ($_SERVER['HTTPS'] != "on" ? 'http://' :  'https://') . $_SERVER["HTTP_HOST"] . parse_url($_SERVER["REQUEST_URI"], PHP_URL_PATH);
3287
3288                 $url_path = get_self_url_prefix() .
3289                         "/public.php?op=subscribe&feed_url=%s";
3290                 return $url_path;
3291         } // function add_feed_url
3292
3293         function encrypt_password($pass, $salt = '', $mode2 = false) {
3294                 if ($salt && $mode2) {
3295                         return "MODE2:" . hash('sha256', $salt . $pass);
3296                 } else if ($salt) {
3297                         return "SHA1X:" . sha1("$salt:$pass");
3298                 } else {
3299                         return "SHA1:" . sha1($pass);
3300                 }
3301         } // function encrypt_password
3302
3303         function load_filters($link, $feed_id, $owner_uid, $action_id = false) {
3304                 $filters = array();
3305
3306                 $cat_id = (int)getFeedCategory($link, $feed_id);
3307
3308                 $result = db_query($link, "SELECT * FROM ttrss_filters2 WHERE
3309                         owner_uid = $owner_uid AND enabled = true");
3310
3311                 $check_cats = join(",", array_merge(
3312                         getParentCategories($link, $cat_id, $owner_uid),
3313                         array($cat_id)));
3314
3315                 while ($line = db_fetch_assoc($result)) {
3316                         $filter_id = $line["id"];
3317
3318                         $result2 = db_query($link, "SELECT
3319                                 r.reg_exp, r.feed_id, r.cat_id, r.cat_filter, t.name AS type_name
3320                                 FROM ttrss_filters2_rules AS r,
3321                                 ttrss_filter_types AS t
3322                                 WHERE
3323                                         (cat_id IS NULL OR cat_id IN ($check_cats)) AND
3324                                         (feed_id IS NULL OR feed_id = '$feed_id') AND
3325                                         filter_type = t.id AND filter_id = '$filter_id'");
3326
3327                         $rules = array();
3328                         $actions = array();
3329
3330                         while ($rule_line = db_fetch_assoc($result2)) {
3331 #                               print_r($rule_line);
3332
3333                                 $rule = array();
3334                                 $rule["reg_exp"] = $rule_line["reg_exp"];
3335                                 $rule["type"] = $rule_line["type_name"];
3336
3337                                 array_push($rules, $rule);
3338                         }
3339
3340                         $result2 = db_query($link, "SELECT a.action_param,t.name AS type_name
3341                                 FROM ttrss_filters2_actions AS a,
3342                                 ttrss_filter_actions AS t
3343                                 WHERE
3344                                         action_id = t.id AND filter_id = '$filter_id'");
3345
3346                         while ($action_line = db_fetch_assoc($result2)) {
3347 #                               print_r($action_line);
3348
3349                                 $action = array();
3350                                 $action["type"] = $action_line["type_name"];
3351                                 $action["param"] = $action_line["action_param"];
3352
3353                                 array_push($actions, $action);
3354                         }
3355
3356
3357                         $filter = array();
3358                         $filter["match_any_rule"] = sql_bool_to_bool($line["match_any_rule"]);
3359                         $filter["rules"] = $rules;
3360                         $filter["actions"] = $actions;
3361
3362                         if (count($rules) > 0 && count($actions) > 0) {
3363                                 array_push($filters, $filter);
3364                         }
3365                 }
3366
3367                 return $filters;
3368         }
3369
3370         function get_score_pic($score) {
3371                 if ($score > 100) {
3372                         return "score_high.png";
3373                 } else if ($score > 0) {
3374                         return "score_half_high.png";
3375                 } else if ($score < -100) {
3376                         return "score_low.png";
3377                 } else if ($score < 0) {
3378                         return "score_half_low.png";
3379                 } else {
3380                         return "score_neutral.png";
3381                 }
3382         }
3383
3384         function feed_has_icon($id) {
3385                 return is_file(ICONS_DIR . "/$id.ico") && filesize(ICONS_DIR . "/$id.ico") > 0;
3386         }
3387
3388         function init_connection($link) {
3389                 if ($link) {
3390
3391                         if (DB_TYPE == "pgsql") {
3392                                 pg_query($link, "set client_encoding = 'UTF-8'");
3393                                 pg_set_client_encoding("UNICODE");
3394                                 pg_query($link, "set datestyle = 'ISO, european'");
3395                                 pg_query($link, "set TIME ZONE 0");
3396                         } else {
3397                                 db_query($link, "SET time_zone = '+0:0'");
3398
3399                                 if (defined('MYSQL_CHARSET') && MYSQL_CHARSET) {
3400                                         db_query($link, "SET NAMES " . MYSQL_CHARSET);
3401                                 }
3402                         }
3403
3404                         global $pluginhost;
3405
3406                         $pluginhost = new PluginHost($link);
3407                         $pluginhost->load(PLUGINS, $pluginhost::KIND_ALL);
3408
3409                         return true;
3410                 } else {
3411                         print "Unable to connect to database:" . db_last_error();
3412                         return false;
3413                 }
3414         }
3415
3416         /* function ccache_zero($link, $feed_id, $owner_uid) {
3417                 db_query($link, "UPDATE ttrss_counters_cache SET
3418                         value = 0, updated = NOW() WHERE
3419                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3420         } */
3421
3422         function ccache_zero_all($link, $owner_uid) {
3423                 db_query($link, "UPDATE ttrss_counters_cache SET
3424                         value = 0 WHERE owner_uid = '$owner_uid'");
3425
3426                 db_query($link, "UPDATE ttrss_cat_counters_cache SET
3427                         value = 0 WHERE owner_uid = '$owner_uid'");
3428         }
3429
3430         function ccache_remove($link, $feed_id, $owner_uid, $is_cat = false) {
3431
3432                 if (!$is_cat) {
3433                         $table = "ttrss_counters_cache";
3434                 } else {
3435                         $table = "ttrss_cat_counters_cache";
3436                 }
3437
3438                 db_query($link, "DELETE FROM $table WHERE
3439                         feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3440
3441         }
3442
3443         function ccache_update_all($link, $owner_uid) {
3444
3445                 if (get_pref($link, 'ENABLE_FEED_CATS', $owner_uid)) {
3446
3447                         $result = db_query($link, "SELECT feed_id FROM ttrss_cat_counters_cache
3448                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3449
3450                         while ($line = db_fetch_assoc($result)) {
3451                                 ccache_update($link, $line["feed_id"], $owner_uid, true);
3452                         }
3453
3454                         /* We have to manually include category 0 */
3455
3456                         ccache_update($link, 0, $owner_uid, true);
3457
3458                 } else {
3459                         $result = db_query($link, "SELECT feed_id FROM ttrss_counters_cache
3460                                 WHERE feed_id > 0 AND owner_uid = '$owner_uid'");
3461
3462                         while ($line = db_fetch_assoc($result)) {
3463                                 print ccache_update($link, $line["feed_id"], $owner_uid);
3464
3465                         }
3466
3467                 }
3468         }
3469
3470         function ccache_find($link, $feed_id, $owner_uid, $is_cat = false,
3471                 $no_update = false) {
3472
3473                 if (!is_numeric($feed_id)) return;
3474
3475                 if (!$is_cat) {
3476                         $table = "ttrss_counters_cache";
3477                         if ($feed_id > 0) {
3478                                 $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3479                                         WHERE id = '$feed_id'");
3480                                 $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3481                         }
3482                 } else {
3483                         $table = "ttrss_cat_counters_cache";
3484                 }
3485
3486                 if (DB_TYPE == "pgsql") {
3487                         $date_qpart = "updated > NOW() - INTERVAL '15 minutes'";
3488                 } else if (DB_TYPE == "mysql") {
3489                         $date_qpart = "updated > DATE_SUB(NOW(), INTERVAL 15 MINUTE)";
3490                 }
3491
3492                 $result = db_query($link, "SELECT value FROM $table
3493                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id'
3494                         LIMIT 1");
3495
3496                 if (db_num_rows($result) == 1) {
3497                         return db_fetch_result($result, 0, "value");
3498                 } else {
3499                         if ($no_update) {
3500                                 return -1;
3501                         } else {
3502                                 return ccache_update($link, $feed_id, $owner_uid, $is_cat);
3503                         }
3504                 }
3505
3506         }
3507
3508         function ccache_update($link, $feed_id, $owner_uid, $is_cat = false,
3509                 $update_pcat = true) {
3510
3511                 if (!is_numeric($feed_id)) return;
3512
3513                 if (!$is_cat && $feed_id > 0) {
3514                         $tmp_result = db_query($link, "SELECT owner_uid FROM ttrss_feeds
3515                                 WHERE id = '$feed_id'");
3516                         $owner_uid = db_fetch_result($tmp_result, 0, "owner_uid");
3517                 }
3518
3519                 $prev_unread = ccache_find($link, $feed_id, $owner_uid, $is_cat, true);
3520
3521                 /* When updating a label, all we need to do is recalculate feed counters
3522                  * because labels are not cached */
3523
3524                 if ($feed_id < 0) {
3525                         ccache_update_all($link, $owner_uid);
3526                         return;
3527                 }
3528
3529                 if (!$is_cat) {
3530                         $table = "ttrss_counters_cache";
3531                 } else {
3532                         $table = "ttrss_cat_counters_cache";
3533                 }
3534
3535                 if ($is_cat && $feed_id >= 0) {
3536                         if ($feed_id != 0) {
3537                                 $cat_qpart = "cat_id = '$feed_id'";
3538                         } else {
3539                                 $cat_qpart = "cat_id IS NULL";
3540                         }
3541
3542                         /* Recalculate counters for child feeds */
3543
3544                         $result = db_query($link, "SELECT id FROM ttrss_feeds
3545                                                 WHERE owner_uid = '$owner_uid' AND $cat_qpart");
3546
3547                         while ($line = db_fetch_assoc($result)) {
3548                                 ccache_update($link, $line["id"], $owner_uid, false, false);
3549                         }
3550
3551                         $result = db_query($link, "SELECT SUM(value) AS sv
3552                                 FROM ttrss_counters_cache, ttrss_feeds
3553                                 WHERE id = feed_id AND $cat_qpart AND
3554                                 ttrss_feeds.owner_uid = '$owner_uid'");
3555
3556                         $unread = (int) db_fetch_result($result, 0, "sv");
3557
3558                 } else {
3559                         $unread = (int) getFeedArticles($link, $feed_id, $is_cat, true, $owner_uid);
3560                 }
3561
3562                 db_query($link, "BEGIN");
3563
3564                 $result = db_query($link, "SELECT feed_id FROM $table
3565                         WHERE owner_uid = '$owner_uid' AND feed_id = '$feed_id' LIMIT 1");
3566
3567                 if (db_num_rows($result) == 1) {
3568                         db_query($link, "UPDATE $table SET
3569                                 value = '$unread', updated = NOW() WHERE
3570                                 feed_id = '$feed_id' AND owner_uid = '$owner_uid'");
3571
3572                 } else {
3573                         db_query($link, "INSERT INTO $table
3574                                 (feed_id, value, owner_uid, updated)
3575                                 VALUES
3576                                 ($feed_id, $unread, $owner_uid, NOW())");
3577                 }
3578
3579                 db_query($link, "COMMIT");
3580
3581                 if ($feed_id > 0 && $prev_unread != $unread) {
3582
3583                         if (!$is_cat) {
3584
3585                                 /* Update parent category */
3586
3587                                 if ($update_pcat) {
3588
3589                                         $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
3590                                                 WHERE owner_uid = '$owner_uid' AND id = '$feed_id'");
3591
3592                                         $cat_id = (int) db_fetch_result($result, 0, "cat_id");
3593
3594                                         ccache_update($link, $cat_id, $owner_uid, true);
3595
3596                                 }
3597                         }
3598                 } else if ($feed_id < 0) {
3599                         ccache_update_all($link, $owner_uid);
3600                 }
3601
3602                 return $unread;
3603         }
3604
3605         /* function ccache_cleanup($link, $owner_uid) {
3606
3607                 if (DB_TYPE == "pgsql") {
3608                         db_query($link, "DELETE FROM ttrss_counters_cache AS c1 WHERE
3609                                 (SELECT count(*) FROM ttrss_counters_cache AS c2
3610                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3611                                         AND owner_uid = '$owner_uid'");
3612
3613                         db_query($link, "DELETE FROM ttrss_cat_counters_cache AS c1 WHERE
3614                                 (SELECT count(*) FROM ttrss_cat_counters_cache AS c2
3615                                         WHERE c1.feed_id = c2.feed_id AND c2.owner_uid = c1.owner_uid) > 1
3616                                         AND owner_uid = '$owner_uid'");
3617                 } else {
3618                         db_query($link, "DELETE c1 FROM
3619                                         ttrss_counters_cache AS c1,
3620                                         ttrss_counters_cache AS c2
3621                                 WHERE
3622                                         c1.owner_uid = '$owner_uid' AND
3623                                         c1.owner_uid = c2.owner_uid AND
3624                                         c1.feed_id = c2.feed_id");
3625
3626                         db_query($link, "DELETE c1 FROM
3627                                         ttrss_cat_counters_cache AS c1,
3628                                         ttrss_cat_counters_cache AS c2
3629                                 WHERE
3630                                         c1.owner_uid = '$owner_uid' AND
3631                                         c1.owner_uid = c2.owner_uid AND
3632                                         c1.feed_id = c2.feed_id");
3633
3634                 }
3635         } */
3636
3637         function label_find_id($link, $label, $owner_uid) {
3638                 $result = db_query($link,
3639                         "SELECT id FROM ttrss_labels2 WHERE caption = '$label'
3640                                 AND owner_uid = '$owner_uid' LIMIT 1");
3641
3642                 if (db_num_rows($result) == 1) {
3643                         return db_fetch_result($result, 0, "id");
3644                 } else {
3645                         return 0;
3646                 }
3647         }
3648
3649         function get_article_labels($link, $id, $owner_uid = false) {
3650                 $rv = array();
3651
3652                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3653
3654                 $result = db_query($link, "SELECT label_cache FROM
3655                         ttrss_user_entries WHERE ref_id = '$id' AND owner_uid = " .
3656                         $owner_uid);
3657
3658                 if (db_num_rows($result) > 0) {
3659                         $label_cache = db_fetch_result($result, 0, "label_cache");
3660
3661                         if ($label_cache) {
3662                                 $label_cache = json_decode($label_cache, true);
3663
3664                                 if ($label_cache["no-labels"] == 1)
3665                                         return $rv;
3666                                 else
3667                                         return $label_cache;
3668                         }
3669                 }
3670
3671                 $result = db_query($link,
3672                         "SELECT DISTINCT label_id,caption,fg_color,bg_color
3673                                 FROM ttrss_labels2, ttrss_user_labels2
3674                         WHERE id = label_id
3675                                 AND article_id = '$id'
3676                                 AND owner_uid = ". $owner_uid . "
3677                         ORDER BY caption");
3678
3679                 while ($line = db_fetch_assoc($result)) {
3680                         $rk = array($line["label_id"], $line["caption"], $line["fg_color"],
3681                                 $line["bg_color"]);
3682                         array_push($rv, $rk);
3683                 }
3684
3685                 if (count($rv) > 0)
3686                         label_update_cache($link, $owner_uid, $id, $rv);
3687                 else
3688                         label_update_cache($link, $owner_uid, $id, array("no-labels" => 1));
3689
3690                 return $rv;
3691         }
3692
3693
3694         function label_find_caption($link, $label, $owner_uid) {
3695                 $result = db_query($link,
3696                         "SELECT caption FROM ttrss_labels2 WHERE id = '$label'
3697                                 AND owner_uid = '$owner_uid' LIMIT 1");
3698
3699                 if (db_num_rows($result) == 1) {
3700                         return db_fetch_result($result, 0, "caption");
3701                 } else {
3702                         return "";
3703                 }
3704         }
3705
3706         function get_all_labels($link, $owner_uid) {
3707                 $rv = array();
3708
3709                 $result = db_query($link, "SELECT fg_color, bg_color, caption FROM ttrss_labels2 WHERE owner_uid = " . $owner_uid);
3710
3711                 while ($line = db_fetch_assoc($result)) {
3712                         array_push($rv, $line);
3713                 }
3714
3715                 return $rv;
3716         }
3717
3718         function label_update_cache($link, $owner_uid, $id, $labels = false, $force = false) {
3719
3720                 if ($force)
3721                         label_clear_cache($link, $id);
3722
3723                 if (!$labels)
3724                         $labels = get_article_labels($link, $id);
3725
3726                 $labels = db_escape_string(json_encode($labels));
3727
3728                 db_query($link, "UPDATE ttrss_user_entries SET
3729                         label_cache = '$labels' WHERE ref_id = '$id' AND  owner_uid = '$owner_uid'");
3730
3731         }
3732
3733         function label_clear_cache($link, $id) {
3734
3735                 db_query($link, "UPDATE ttrss_user_entries SET
3736                         label_cache = '' WHERE ref_id = '$id'");
3737
3738         }
3739
3740         function label_remove_article($link, $id, $label, $owner_uid) {
3741
3742                 $label_id = label_find_id($link, $label, $owner_uid);
3743
3744                 if (!$label_id) return;
3745
3746                 $result = db_query($link,
3747                         "DELETE FROM ttrss_user_labels2
3748                         WHERE
3749                                 label_id = '$label_id' AND
3750                                 article_id = '$id'");
3751
3752                 label_clear_cache($link, $id);
3753         }
3754
3755         function label_add_article($link, $id, $label, $owner_uid) {
3756
3757                 $label_id = label_find_id($link, $label, $owner_uid);
3758
3759                 if (!$label_id) return;
3760
3761                 $result = db_query($link,
3762                         "SELECT
3763                                 article_id FROM ttrss_labels2, ttrss_user_labels2
3764                         WHERE
3765                                 label_id = id AND
3766                                 label_id = '$label_id' AND
3767                                 article_id = '$id' AND owner_uid = '$owner_uid'
3768                         LIMIT 1");
3769
3770                 if (db_num_rows($result) == 0) {
3771                         db_query($link, "INSERT INTO ttrss_user_labels2
3772                                 (label_id, article_id) VALUES ('$label_id', '$id')");
3773                 }
3774
3775                 label_clear_cache($link, $id);
3776
3777         }
3778
3779         function label_remove($link, $id, $owner_uid) {
3780                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
3781
3782                 db_query($link, "BEGIN");
3783
3784                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
3785                         WHERE id = '$id'");
3786
3787                 $caption = db_fetch_result($result, 0, "caption");
3788
3789                 $result = db_query($link, "DELETE FROM ttrss_labels2 WHERE id = '$id'
3790                         AND owner_uid = " . $owner_uid);
3791
3792                 if (db_affected_rows($link, $result) != 0 && $caption) {
3793
3794                         /* Remove access key for the label */
3795
3796                         $ext_id = -11 - $id;
3797
3798                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
3799                                 feed_id = '$ext_id' AND owner_uid = $owner_uid");
3800
3801                         /* Disable filters that reference label being removed */
3802
3803                         db_query($link, "UPDATE ttrss_filters SET
3804                                 enabled = false WHERE action_param = '$caption'
3805                                         AND action_id = 7
3806                                         AND owner_uid = " . $owner_uid);
3807
3808                         /* Remove cached data */
3809
3810                         db_query($link, "UPDATE ttrss_user_entries SET label_cache = ''
3811                                 WHERE label_cache LIKE '%$caption%' AND owner_uid = " . $owner_uid);
3812
3813                 }
3814
3815                 db_query($link, "COMMIT");
3816         }
3817
3818         function label_create($link, $caption, $fg_color = '', $bg_color = '', $owner_uid) {
3819
3820                 if (!$owner_uid) $owner_uid = $_SESSION['uid'];
3821
3822                 db_query($link, "BEGIN");
3823
3824                 $result = false;
3825
3826                 $result = db_query($link, "SELECT id FROM ttrss_labels2
3827                         WHERE caption = '$caption' AND owner_uid = $owner_uid");
3828
3829                 if (db_num_rows($result) == 0) {
3830                         $result = db_query($link,
3831                                 "INSERT INTO ttrss_labels2 (caption,owner_uid,fg_color,bg_color)
3832                                         VALUES ('$caption', '$owner_uid', '$fg_color', '$bg_color')");
3833
3834                         $result = db_affected_rows($link, $result) != 0;
3835                 }
3836
3837                 db_query($link, "COMMIT");
3838
3839                 return $result;
3840         }
3841
3842         function format_tags_string($tags, $id) {
3843
3844                 $tags_str = "";
3845                 $tags_nolinks_str = "";
3846
3847                 $num_tags = 0;
3848
3849                 $tag_limit = 6;
3850
3851                 $formatted_tags = array();
3852
3853                 foreach ($tags as $tag) {
3854                         $num_tags++;
3855                         $tag_escaped = str_replace("'", "\\'", $tag);
3856
3857                         if (mb_strlen($tag) > 30) {
3858                                 $tag = truncate_string($tag, 30);
3859                         }
3860
3861                         $tag_str = "<a href=\"javascript:viewfeed('$tag_escaped')\">$tag</a>";
3862
3863                         array_push($formatted_tags, $tag_str);
3864
3865                         $tmp_tags_str = implode(", ", $formatted_tags);
3866
3867                         if ($num_tags == $tag_limit || mb_strlen($tmp_tags_str) > 150) {
3868                                 break;
3869                         }
3870                 }
3871
3872                 $tags_str = implode(", ", $formatted_tags);
3873
3874                 if ($num_tags < count($tags)) {
3875                         $tags_str .= ", &hellip;";
3876                 }
3877
3878                 if ($num_tags == 0) {
3879                         $tags_str = __("no tags");
3880                 }
3881
3882                 return $tags_str;
3883
3884         }
3885
3886         function format_article_labels($labels, $id) {
3887
3888                 $labels_str = "";
3889
3890                 foreach ($labels as $l) {
3891                         $labels_str .= sprintf("<span class='hlLabelRef'
3892                                 style='color : %s; background-color : %s'>%s</span>",
3893                                         $l[2], $l[3], $l[1]);
3894                         }
3895
3896                 return $labels_str;
3897
3898         }
3899
3900         function format_article_note($id, $note) {
3901
3902                 $str = "<div class='articleNote'        onclick=\"editArticleNote($id)\">
3903                         <div class='noteEdit' onclick=\"editArticleNote($id)\">".
3904                         __('(edit note)')."</div>$note</div>";
3905
3906                 return $str;
3907         }
3908
3909         function toggle_collapse_cat($link, $cat_id, $mode) {
3910                 if ($cat_id > 0) {
3911                         $mode = bool_to_sql_bool($mode);
3912
3913                         db_query($link, "UPDATE ttrss_feed_categories SET
3914                                 collapsed = $mode WHERE id = '$cat_id' AND owner_uid = " .
3915                                 $_SESSION["uid"]);
3916                 } else {
3917                         $pref_name = '';
3918
3919                         switch ($cat_id) {
3920                         case -1:
3921                                 $pref_name = '_COLLAPSED_SPECIAL';
3922                                 break;
3923                         case -2:
3924                                 $pref_name = '_COLLAPSED_LABELS';
3925                                 break;
3926                         case 0:
3927                                 $pref_name = '_COLLAPSED_UNCAT';
3928                                 break;
3929                         }
3930
3931                         if ($pref_name) {
3932                                 if ($mode) {
3933                                         set_pref($link, $pref_name, 'true');
3934                                 } else {
3935                                         set_pref($link, $pref_name, 'false');
3936                                 }
3937                         }
3938                 }
3939         }
3940
3941         function remove_feed($link, $id, $owner_uid) {
3942
3943                 if ($id > 0) {
3944
3945                         /* save starred articles in Archived feed */
3946
3947                         db_query($link, "BEGIN");
3948
3949                         /* prepare feed if necessary */
3950
3951                         $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
3952                                 WHERE id = '$id'");
3953
3954                         if (db_num_rows($result) == 0) {
3955                                 db_query($link, "INSERT INTO ttrss_archived_feeds
3956                                         (id, owner_uid, title, feed_url, site_url)
3957                                 SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
3958                                 WHERE id = '$id'");
3959                         }
3960
3961                         db_query($link, "UPDATE ttrss_user_entries SET feed_id = NULL,
3962                                 orig_feed_id = '$id' WHERE feed_id = '$id' AND
3963                                         marked = true AND owner_uid = $owner_uid");
3964
3965                         /* Remove access key for the feed */
3966
3967                         db_query($link, "DELETE FROM ttrss_access_keys WHERE
3968                                 feed_id = '$id' AND owner_uid = $owner_uid");
3969
3970                         /* remove the feed */
3971
3972                         db_query($link, "DELETE FROM ttrss_feeds
3973                                         WHERE id = '$id' AND owner_uid = $owner_uid");
3974
3975                         db_query($link, "COMMIT");
3976
3977                         if (file_exists(ICONS_DIR . "/$id.ico")) {
3978                                 unlink(ICONS_DIR . "/$id.ico");
3979                         }
3980
3981                         ccache_remove($link, $id, $owner_uid);
3982
3983                 } else {
3984                         label_remove($link, -11-$id, $owner_uid);
3985                         ccache_remove($link, -11-$id, $owner_uid);
3986                 }
3987         }
3988
3989         function get_feed_category($link, $feed_cat, $parent_cat_id = false) {
3990                 if ($parent_cat_id) {
3991                         $parent_qpart = "parent_cat = '$parent_cat_id'";
3992                         $parent_insert = "'$parent_cat_id'";
3993                 } else {
3994                         $parent_qpart = "parent_cat IS NULL";
3995                         $parent_insert = "NULL";
3996                 }
3997
3998                 $result = db_query($link,
3999                         "SELECT id FROM ttrss_feed_categories
4000                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4001
4002                 if (db_num_rows($result) == 0) {
4003                         return false;
4004                 } else {
4005                         return db_fetch_result($result, 0, "id");
4006                 }
4007         }
4008
4009         function add_feed_category($link, $feed_cat, $parent_cat_id = false) {
4010
4011                 if (!$feed_cat) return false;
4012
4013                 db_query($link, "BEGIN");
4014
4015                 if ($parent_cat_id) {
4016                         $parent_qpart = "parent_cat = '$parent_cat_id'";
4017                         $parent_insert = "'$parent_cat_id'";
4018                 } else {
4019                         $parent_qpart = "parent_cat IS NULL";
4020                         $parent_insert = "NULL";
4021                 }
4022
4023                 $result = db_query($link,
4024                         "SELECT id FROM ttrss_feed_categories
4025                         WHERE $parent_qpart AND title = '$feed_cat' AND owner_uid = ".$_SESSION["uid"]);
4026
4027                 if (db_num_rows($result) == 0) {
4028
4029                         $result = db_query($link,
4030                                 "INSERT INTO ttrss_feed_categories (owner_uid,title,parent_cat)
4031                                 VALUES ('".$_SESSION["uid"]."', '$feed_cat', $parent_insert)");
4032
4033                         db_query($link, "COMMIT");
4034
4035                         return true;
4036                 }
4037
4038                 return false;
4039         }
4040
4041         function remove_feed_category($link, $id, $owner_uid) {
4042
4043                 db_query($link, "DELETE FROM ttrss_feed_categories
4044                         WHERE id = '$id' AND owner_uid = $owner_uid");
4045
4046                 ccache_remove($link, $id, $owner_uid, true);
4047         }
4048
4049         function archive_article($link, $id, $owner_uid) {
4050                 db_query($link, "BEGIN");
4051
4052                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4053                         WHERE ref_id = '$id' AND owner_uid = $owner_uid");
4054
4055                 if (db_num_rows($result) != 0) {
4056
4057                         /* prepare the archived table */
4058
4059                         $feed_id = (int) db_fetch_result($result, 0, "feed_id");
4060
4061                         if ($feed_id) {
4062                                 $result = db_query($link, "SELECT id FROM ttrss_archived_feeds
4063                                         WHERE id = '$feed_id'");
4064
4065                                 if (db_num_rows($result) == 0) {
4066                                         db_query($link, "INSERT INTO ttrss_archived_feeds
4067                                                 (id, owner_uid, title, feed_url, site_url)
4068                                         SELECT id, owner_uid, title, feed_url, site_url from ttrss_feeds
4069                                         WHERE id = '$feed_id'");
4070                                 }
4071
4072                                 db_query($link, "UPDATE ttrss_user_entries
4073                                         SET orig_feed_id = feed_id, feed_id = NULL
4074                                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4075                         }
4076                 }
4077
4078                 db_query($link, "COMMIT");
4079         }
4080
4081         function getArticleFeed($link, $id) {
4082                 $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
4083                         WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
4084
4085                 if (db_num_rows($result) != 0) {
4086                         return db_fetch_result($result, 0, "feed_id");
4087                 } else {
4088                         return 0;
4089                 }
4090         }
4091
4092         /**
4093          * Fixes incomplete URLs by prepending "http://".
4094          * Also replaces feed:// with http://, and
4095          * prepends a trailing slash if the url is a domain name only.
4096          *
4097          * @param string $url Possibly incomplete URL
4098          *
4099          * @return string Fixed URL.
4100          */
4101         function fix_url($url) {
4102                 if (strpos($url, '://') === false) {
4103                         $url = 'http://' . $url;
4104                 } else if (substr($url, 0, 5) == 'feed:') {
4105                         $url = 'http:' . substr($url, 5);
4106                 }
4107
4108                 //prepend slash if the URL has no slash in it
4109                 // "http://www.example" -> "http://www.example/"
4110                 if (strpos($url, '/', strpos($url, ':') + 3) === false) {
4111                         $url .= '/';
4112                 }
4113
4114                 if ($url != "http:///")
4115                         return $url;
4116                 else
4117                         return '';
4118         }
4119
4120         function validate_feed_url($url) {
4121                 $parts = parse_url($url);
4122
4123                 return ($parts['scheme'] == 'http' || $parts['scheme'] == 'feed' || $parts['scheme'] == 'https');
4124
4125         }
4126
4127         function get_article_enclosures($link, $id) {
4128
4129                 $query = "SELECT * FROM ttrss_enclosures
4130                         WHERE post_id = '$id' AND content_url != ''";
4131
4132                 $rv = array();
4133
4134                 $result = db_query($link, $query);
4135
4136                 if (db_num_rows($result) > 0) {
4137                         while ($line = db_fetch_assoc($result)) {
4138                                 array_push($rv, $line);
4139                         }
4140                 }
4141
4142                 return $rv;
4143         }
4144
4145         function api_get_feeds($link, $cat_id, $unread_only, $limit, $offset, $include_nested = false) {
4146
4147                         $feeds = array();
4148
4149                         /* Labels */
4150
4151                         if ($cat_id == -4 || $cat_id == -2) {
4152                                 $counters = getLabelCounters($link, true);
4153
4154                                 foreach (array_values($counters) as $cv) {
4155
4156                                         $unread = $cv["counter"];
4157
4158                                         if ($unread || !$unread_only) {
4159
4160                                                 $row = array(
4161                                                                 "id" => $cv["id"],
4162                                                                 "title" => $cv["description"],
4163                                                                 "unread" => $cv["counter"],
4164                                                                 "cat_id" => -2,
4165                                                         );
4166
4167                                                 array_push($feeds, $row);
4168                                         }
4169                                 }
4170                         }
4171
4172                         /* Virtual feeds */
4173
4174                         if ($cat_id == -4 || $cat_id == -1) {
4175                                 foreach (array(-1, -2, -3, -4, -6, 0) as $i) {
4176                                         $unread = getFeedUnread($link, $i);
4177
4178                                         if ($unread || !$unread_only) {
4179                                                 $title = getFeedTitle($link, $i);
4180
4181                                                 $row = array(
4182                                                                 "id" => $i,
4183                                                                 "title" => $title,
4184                                                                 "unread" => $unread,
4185                                                                 "cat_id" => -1,
4186                                                         );
4187                                                 array_push($feeds, $row);
4188                                         }
4189
4190                                 }
4191                         }
4192
4193                         /* Child cats */
4194
4195                         if ($include_nested && $cat_id) {
4196                                 $result = db_query($link, "SELECT
4197                                         id, title FROM ttrss_feed_categories
4198                                         WHERE parent_cat = '$cat_id' AND owner_uid = " . $_SESSION["uid"] .
4199                                 " ORDER BY id, title");
4200
4201                                 while ($line = db_fetch_assoc($result)) {
4202                                         $unread = getFeedUnread($link, $line["id"], true) +
4203                                                 getCategoryChildrenUnread($link, $line["id"]);
4204
4205                                         if ($unread || !$unread_only) {
4206                                                 $row = array(
4207                                                                 "id" => $line["id"],
4208                                                                 "title" => $line["title"],
4209                                                                 "unread" => $unread,
4210                                                                 "is_cat" => true,
4211                                                         );
4212                                                 array_push($feeds, $row);
4213                                         }
4214                                 }
4215                         }
4216
4217                         /* Real feeds */
4218
4219                         if ($limit) {
4220                                 $limit_qpart = "LIMIT $limit OFFSET $offset";
4221                         } else {
4222                                 $limit_qpart = "";
4223                         }
4224
4225                         if ($cat_id == -4 || $cat_id == -3) {
4226                                 $result = db_query($link, "SELECT
4227                                         id, feed_url, cat_id, title, order_id, ".
4228                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4229                                                 FROM ttrss_feeds WHERE owner_uid = " . $_SESSION["uid"] .
4230                                                 " ORDER BY cat_id, title " . $limit_qpart);
4231                         } else {
4232
4233                                 if ($cat_id)
4234                                         $cat_qpart = "cat_id = '$cat_id'";
4235                                 else
4236                                         $cat_qpart = "cat_id IS NULL";
4237
4238                                 $result = db_query($link, "SELECT
4239                                         id, feed_url, cat_id, title, order_id, ".
4240                                                 SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
4241                                                 FROM ttrss_feeds WHERE
4242                                                 $cat_qpart AND owner_uid = " . $_SESSION["uid"] .
4243                                                 " ORDER BY cat_id, title " . $limit_qpart);
4244                         }
4245
4246                         while ($line = db_fetch_assoc($result)) {
4247
4248                                 $unread = getFeedUnread($link, $line["id"]);
4249
4250                                 $has_icon = feed_has_icon($line['id']);
4251
4252                                 if ($unread || !$unread_only) {
4253
4254                                         $row = array(
4255                                                         "feed_url" => $line["feed_url"],
4256                                                         "title" => $line["title"],
4257                                                         "id" => (int)$line["id"],
4258                                                         "unread" => (int)$unread,
4259                                                         "has_icon" => $has_icon,
4260                                                         "cat_id" => (int)$line["cat_id"],
4261                                                         "last_updated" => strtotime($line["last_updated"]),
4262                                                         "order_id" => (int) $line["order_id"],
4263                                                 );
4264
4265                                         array_push($feeds, $row);
4266                                 }
4267                         }
4268
4269                 return $feeds;
4270         }
4271
4272         function api_get_headlines($link, $feed_id, $limit, $offset,
4273                                 $filter, $is_cat, $show_excerpt, $show_content, $view_mode, $order,
4274                                 $include_attachments, $since_id,
4275                                 $search = "", $search_mode = "", $match_on = "",
4276                                 $include_nested = false, $sanitize_content = true) {
4277
4278                         $qfh_ret = queryFeedHeadlines($link, $feed_id, $limit,
4279                                 $view_mode, $is_cat, $search, $search_mode, $match_on,
4280                                 $order, $offset, 0, false, $since_id, $include_nested);
4281
4282                         $result = $qfh_ret[0];
4283                         $feed_title = $qfh_ret[1];
4284
4285                         $headlines = array();
4286
4287                         while ($line = db_fetch_assoc($result)) {
4288                                 $is_updated = ($line["last_read"] == "" &&
4289                                         ($line["unread"] != "t" && $line["unread"] != "1"));
4290
4291                                 $tags = explode(",", $line["tag_cache"]);
4292                                 $labels = json_decode($line["label_cache"], true);
4293
4294                                 //if (!$tags) $tags = get_article_tags($link, $line["id"]);
4295                                 //if (!$labels) $labels = get_article_labels($link, $line["id"]);
4296
4297                                 $headline_row = array(
4298                                                 "id" => (int)$line["id"],
4299                                                 "unread" => sql_bool_to_bool($line["unread"]),
4300                                                 "marked" => sql_bool_to_bool($line["marked"]),
4301                                                 "published" => sql_bool_to_bool($line["published"]),
4302                                                 "updated" => strtotime($line["updated"]),
4303                                                 "is_updated" => $is_updated,
4304                                                 "title" => $line["title"],
4305                                                 "link" => $line["link"],
4306                                                 "feed_id" => $line["feed_id"],
4307                                                 "tags" => $tags,
4308                                         );
4309
4310                                         if ($include_attachments)
4311                                                 $headline_row['attachments'] = get_article_enclosures($link,
4312                                                         $line['id']);
4313
4314                                 if ($show_excerpt) {
4315                                         $excerpt = truncate_string(strip_tags($line["content_preview"]), 100);
4316                                         $headline_row["excerpt"] = $excerpt;
4317                                 }
4318
4319                                 if ($show_content) {
4320
4321                                         if ($line["cached_content"] != "") {
4322                                                 $line["content_preview"] =& $line["cached_content"];
4323                                         }
4324
4325                                         if ($sanitize_content) {
4326                                                 $headline_row["content"] = sanitize($link,
4327                                                         $line["content_preview"], false, false, $line["site_url"]);
4328                                         } else {
4329                                                 $headline_row["content"] = $line["content_preview"];
4330                                         }
4331                                 }
4332
4333                                 // unify label output to ease parsing
4334                                 if ($labels["no-labels"] == 1) $labels = array();
4335
4336                                 $headline_row["labels"] = $labels;
4337
4338                                 $headline_row["feed_title"] = $line["feed_title"];
4339
4340                                 $headline_row["comments_count"] = (int)$line["num_comments"];
4341                                 $headline_row["comments_link"] = $line["comments"];
4342
4343                                 $headline_row["always_display_attachments"] = sql_bool_to_bool($line["always_display_enclosures"]);
4344
4345                                 array_push($headlines, $headline_row);
4346                         }
4347
4348                         return $headlines;
4349         }
4350
4351         function generate_error_feed($link, $error) {
4352                 $reply = array();
4353
4354                 $reply['headlines']['id'] = -6;
4355                 $reply['headlines']['is_cat'] = false;
4356
4357                 $reply['headlines']['toolbar'] = '';
4358                 $reply['headlines']['content'] = "<div class='whiteBox'>". $error . "</div>";
4359
4360                 $reply['headlines-info'] = array("count" => 0,
4361                         "vgroup_last_feed" => '',
4362                         "unread" => 0,
4363                         "disable_cache" => true);
4364
4365                 return $reply;
4366         }
4367
4368
4369         function generate_dashboard_feed($link) {
4370                 $reply = array();
4371
4372                 $reply['headlines']['id'] = -5;
4373                 $reply['headlines']['is_cat'] = false;
4374
4375                 $reply['headlines']['toolbar'] = '';
4376                 $reply['headlines']['content'] = "<div class='whiteBox'>".__('No feed selected.');
4377
4378                 $reply['headlines']['content'] .= "<p class=\"small\"><span class=\"insensitive\">";
4379
4380                 $result = db_query($link, "SELECT ".SUBSTRING_FOR_DATE."(MAX(last_updated), 1, 19) AS last_updated FROM ttrss_feeds
4381                         WHERE owner_uid = " . $_SESSION['uid']);
4382
4383                 $last_updated = db_fetch_result($result, 0, "last_updated");
4384                 $last_updated = make_local_datetime($link, $last_updated, false);
4385
4386                 $reply['headlines']['content'] .= sprintf(__("Feeds last updated at %s"), $last_updated);
4387
4388                 $result = db_query($link, "SELECT COUNT(id) AS num_errors
4389                         FROM ttrss_feeds WHERE last_error != '' AND owner_uid = ".$_SESSION["uid"]);
4390
4391                 $num_errors = db_fetch_result($result, 0, "num_errors");
4392
4393                 if ($num_errors > 0) {
4394                         $reply['headlines']['content'] .= "<br/>";
4395                         $reply['headlines']['content'] .= "<a class=\"insensitive\" href=\"#\" onclick=\"showFeedsWithErrors()\">".
4396                                 __('Some feeds have update errors (click for details)')."</a>";
4397                 }
4398                 $reply['headlines']['content'] .= "</span></p>";
4399
4400                 $reply['headlines-info'] = array("count" => 0,
4401                         "vgroup_last_feed" => '',
4402                         "unread" => 0,
4403                         "disable_cache" => true);
4404
4405                 return $reply;
4406         }
4407
4408         function save_email_address($link, $email) {
4409                 // FIXME: implement persistent storage of emails
4410
4411                 if (!$_SESSION['stored_emails'])
4412                         $_SESSION['stored_emails'] = array();
4413
4414                 if (!in_array($email, $_SESSION['stored_emails']))
4415                         array_push($_SESSION['stored_emails'], $email);
4416         }
4417
4418         function update_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4419                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4420
4421                 $sql_is_cat = bool_to_sql_bool($is_cat);
4422
4423                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4424                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4425                         AND owner_uid = " . $owner_uid);
4426
4427                 if (db_num_rows($result) == 1) {
4428                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4429
4430                         db_query($link, "UPDATE ttrss_access_keys SET access_key = '$key'
4431                                 WHERE feed_id = '$feed_id' AND is_cat = $sql_is_cat
4432                                 AND owner_uid = " . $owner_uid);
4433
4434                         return $key;
4435
4436                 } else {
4437                         return get_feed_access_key($link, $feed_id, $is_cat, $owner_uid);
4438                 }
4439         }
4440
4441         function get_feed_access_key($link, $feed_id, $is_cat, $owner_uid = false) {
4442
4443                 if (!$owner_uid) $owner_uid = $_SESSION["uid"];
4444
4445                 $sql_is_cat = bool_to_sql_bool($is_cat);
4446
4447                 $result = db_query($link, "SELECT access_key FROM ttrss_access_keys
4448                         WHERE feed_id = '$feed_id'      AND is_cat = $sql_is_cat
4449                         AND owner_uid = " . $owner_uid);
4450
4451                 if (db_num_rows($result) == 1) {
4452                         return db_fetch_result($result, 0, "access_key");
4453                 } else {
4454                         $key = db_escape_string(sha1(uniqid(rand(), true)));
4455
4456                         $result = db_query($link, "INSERT INTO ttrss_access_keys
4457                                 (access_key, feed_id, is_cat, owner_uid)
4458                                 VALUES ('$key', '$feed_id', $sql_is_cat, '$owner_uid')");
4459
4460                         return $key;
4461                 }
4462                 return false;
4463         }
4464
4465         function get_feeds_from_html($url, $content)
4466         {
4467                 $url     = fix_url($url);
4468                 $baseUrl = substr($url, 0, strrpos($url, '/') + 1);
4469
4470                 libxml_use_internal_errors(true);
4471
4472                 $doc = new DOMDocument();
4473                 $doc->loadHTML($content);
4474                 $xpath = new DOMXPath($doc);
4475                 $entries = $xpath->query('/html/head/link[@rel="alternate"]');
4476                 $feedUrls = array();
4477                 foreach ($entries as $entry) {
4478                         if ($entry->hasAttribute('href')) {
4479                                 $title = $entry->getAttribute('title');
4480                                 if ($title == '') {
4481                                         $title = $entry->getAttribute('type');
4482                                 }
4483                                 $feedUrl = rewrite_relative_url(
4484                                         $baseUrl, $entry->getAttribute('href')
4485                                 );
4486                                 $feedUrls[$feedUrl] = $title;
4487                         }
4488                 }
4489                 return $feedUrls;
4490         }
4491
4492         function is_html($content) {
4493                 return preg_match("/<html|DOCTYPE html/i", substr($content, 0, 20)) !== 0;
4494         }
4495
4496         function url_is_html($url, $login = false, $pass = false) {
4497                 return is_html(fetch_file_contents($url, false, $login, $pass));
4498         }
4499
4500         function print_label_select($link, $name, $value, $attributes = "") {
4501
4502                 $result = db_query($link, "SELECT caption FROM ttrss_labels2
4503                         WHERE owner_uid = '".$_SESSION["uid"]."' ORDER BY caption");
4504
4505                 print "<select default=\"$value\" name=\"" . htmlspecialchars($name) .
4506                         "\" $attributes onchange=\"labelSelectOnChange(this)\" >";
4507
4508                 while ($line = db_fetch_assoc($result)) {
4509
4510                         $issel = ($line["caption"] == $value) ? "selected=\"1\"" : "";
4511
4512                         print "<option value=\"".htmlspecialchars($line["caption"])."\"
4513                                 $issel>" . htmlspecialchars($line["caption"]) . "</option>";
4514
4515                 }
4516
4517 #               print "<option value=\"ADD_LABEL\">" .__("Add label...") . "</option>";
4518
4519                 print "</select>";
4520
4521
4522         }
4523
4524         function format_article_enclosures($link, $id, $always_display_enclosures,
4525                                         $article_content) {
4526
4527                 $result = get_article_enclosures($link, $id);
4528                 $rv = '';
4529
4530                 if (count($result) > 0) {
4531
4532                         $entries_html = array();
4533                         $entries = array();
4534
4535                         foreach ($result as $line) {
4536
4537                                 $url = $line["content_url"];
4538                                 $ctype = $line["content_type"];
4539
4540                                 if (!$ctype) $ctype = __("unknown type");
4541
4542                                 $filename = substr($url, strrpos($url, "/")+1);
4543
4544 #                               $player = format_inline_player($link, $url, $ctype);
4545
4546 #                               $entry .= " <a target=\"_blank\" href=\"" . htmlspecialchars($url) . "\">" .
4547 #                                       $filename . " (" . $ctype . ")" . "</a>";
4548
4549                                 $entry = "<div onclick=\"window.open('".htmlspecialchars($url)."')\"
4550                                         dojoType=\"dijit.MenuItem\">$filename ($ctype)</div>";
4551
4552                                 array_push($entries_html, $entry);
4553
4554                                 $entry = array();
4555
4556                                 $entry["type"] = $ctype;
4557                                 $entry["filename"] = $filename;
4558                                 $entry["url"] = $url;
4559
4560                                 array_push($entries, $entry);
4561                         }
4562
4563                         if (!get_pref($link, "STRIP_IMAGES")) {
4564                                 if ($always_display_enclosures ||
4565                                                         !preg_match("/<img/i", $article_content)) {
4566
4567                                         foreach ($entries as $entry) {
4568
4569                                                 if (preg_match("/image/", $entry["type"]) ||
4570                                                                 preg_match("/\.(jpg|png|gif|bmp)/i", $entry["filename"])) {
4571
4572                                                                 $rv .= "<p><img
4573                                                                 alt=\"".htmlspecialchars($entry["filename"])."\"
4574                                                                 src=\"" .htmlspecialchars($entry["url"]) . "\"/></p>";
4575
4576                                                 }
4577                                         }
4578                                 }
4579                         }
4580
4581                         $rv .= "<br/><div dojoType=\"dijit.form.DropDownButton\">".
4582                                 "<span>" . __('Attachments')."</span>";
4583                         $rv .= "<div dojoType=\"dijit.Menu\" style=\"display: none;\">";
4584
4585                         foreach ($entries_html as $entry) { $rv .= $entry; };
4586
4587                         $rv .= "</div></div>";
4588                 }
4589
4590                 return $rv;
4591         }
4592
4593         function getLastArticleId($link) {
4594                 $result = db_query($link, "SELECT MAX(ref_id) AS id FROM ttrss_user_entries
4595                         WHERE owner_uid = " . $_SESSION["uid"]);
4596
4597                 if (db_num_rows($result) == 1) {
4598                         return db_fetch_result($result, 0, "id");
4599                 } else {
4600                         return -1;
4601                 }
4602         }
4603
4604         function build_url($parts) {
4605                 return $parts['scheme'] . "://" . $parts['host'] . $parts['path'];
4606         }
4607
4608         /**
4609          * Converts a (possibly) relative URL to a absolute one.
4610          *
4611          * @param string $url     Base URL (i.e. from where the document is)
4612          * @param string $rel_url Possibly relative URL in the document
4613          *
4614          * @return string Absolute URL
4615          */
4616         function rewrite_relative_url($url, $rel_url) {
4617                 if (strpos($rel_url, "magnet:") === 0) {
4618                         return $rel_url;
4619                 } else if (strpos($rel_url, "://") !== false) {
4620                         return $rel_url;
4621                 } else if (strpos($rel_url, "//") === 0) {
4622                         # protocol-relative URL (rare but they exist)
4623                         return $rel_url;
4624                 } else if (strpos($rel_url, "/") === 0)
4625                 {
4626                         $parts = parse_url($url);
4627                         $parts['path'] = $rel_url;
4628
4629                         return build_url($parts);
4630
4631                 } else {
4632                         $parts = parse_url($url);
4633                         if (!isset($parts['path'])) {
4634                                 $parts['path'] = '/';
4635                         }
4636                         $dir = $parts['path'];
4637                         if (substr($dir, -1) !== '/') {
4638                                 $dir = dirname($parts['path']);
4639                                 $dir !== '/' && $dir .= '/';
4640                         }
4641                         $parts['path'] = $dir . $rel_url;
4642
4643                         return build_url($parts);
4644                 }
4645         }
4646
4647         function sphinx_search($query, $offset = 0, $limit = 30) {
4648                 require_once 'lib/sphinxapi.php';
4649
4650                 $sphinxClient = new SphinxClient();
4651
4652                 $sphinxClient->SetServer('localhost', 9312);
4653                 $sphinxClient->SetConnectTimeout(1);
4654
4655                 $sphinxClient->SetFieldWeights(array('title' => 70, 'content' => 30,
4656                         'feed_title' => 20));
4657
4658                 $sphinxClient->SetMatchMode(SPH_MATCH_EXTENDED2);
4659                 $sphinxClient->SetRankingMode(SPH_RANK_PROXIMITY_BM25);
4660                 $sphinxClient->SetLimits($offset, $limit, 1000);
4661                 $sphinxClient->SetArrayResult(false);
4662                 $sphinxClient->SetFilter('owner_uid', array($_SESSION['uid']));
4663
4664                 $result = $sphinxClient->Query($query, SPHINX_INDEX);
4665
4666                 $ids = array();
4667
4668                 if (is_array($result['matches'])) {
4669                         foreach (array_keys($result['matches']) as $int_id) {
4670                                 $ref_id = $result['matches'][$int_id]['attrs']['ref_id'];
4671                                 array_push($ids, $ref_id);
4672                         }
4673                 }
4674
4675                 return $ids;
4676         }
4677
4678         function cleanup_tags($link, $days = 14, $limit = 1000) {
4679
4680                 if (DB_TYPE == "pgsql") {
4681                         $interval_query = "date_updated < NOW() - INTERVAL '$days days'";
4682                 } else if (DB_TYPE == "mysql") {
4683                         $interval_query = "date_updated < DATE_SUB(NOW(), INTERVAL $days DAY)";
4684                 }
4685
4686                 $tags_deleted = 0;
4687
4688                 while ($limit > 0) {
4689                         $limit_part = 500;
4690
4691                         $query = "SELECT ttrss_tags.id AS id
4692                                 FROM ttrss_tags, ttrss_user_entries, ttrss_entries
4693                                 WHERE post_int_id = int_id AND $interval_query AND
4694                                 ref_id = ttrss_entries.id AND tag_cache != '' LIMIT $limit_part";
4695
4696                         $result = db_query($link, $query);
4697
4698                         $ids = array();
4699
4700                         while ($line = db_fetch_assoc($result)) {
4701                                 array_push($ids, $line['id']);
4702                         }
4703
4704                         if (count($ids) > 0) {
4705                                 $ids = join(",", $ids);
4706                                 print ".";
4707
4708                                 $tmp_result = db_query($link, "DELETE FROM ttrss_tags WHERE id IN ($ids)");
4709                                 $tags_deleted += db_affected_rows($link, $tmp_result);
4710                         } else {
4711                                 break;
4712                         }
4713
4714                         $limit -= $limit_part;
4715                 }
4716
4717                 print "\n";
4718
4719                 return $tags_deleted;
4720         }
4721
4722         function print_user_stylesheet($link) {
4723                 $value = get_pref($link, 'USER_STYLESHEET');
4724
4725                 if ($value) {
4726                         print "<style type=\"text/css\">";
4727                         print str_replace("<br/>", "\n", $value);
4728                         print "</style>";
4729                 }
4730
4731         }
4732
4733         function rewrite_urls($html) {
4734                 libxml_use_internal_errors(true);
4735
4736                 $charset_hack = '<head>
4737                         <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
4738                 </head>';
4739
4740                 $doc = new DOMDocument();
4741                 $doc->loadHTML($charset_hack . $html);
4742                 $xpath = new DOMXPath($doc);
4743
4744                 $entries = $xpath->query('//*/text()');
4745
4746                 foreach ($entries as $entry) {
4747                         if (strstr($entry->wholeText, "://") !== false) {
4748                                 $text = preg_replace("/((?<!=.)((http|https|ftp)+):\/\/[^ ,!]+)/i",
4749                                         "<a target=\"_blank\" href=\"\\1\">\\1</a>", $entry->wholeText);
4750
4751                                 if ($text != $entry->wholeText) {
4752                                         $cdoc = new DOMDocument();
4753                                         $cdoc->loadHTML($charset_hack . $text);
4754
4755
4756                                         foreach ($cdoc->childNodes as $cnode) {
4757                                                 $cnode = $doc->importNode($cnode, true);
4758
4759                                                 if ($cnode) {
4760                                                         $entry->parentNode->insertBefore($cnode);
4761                                                 }
4762                                         }
4763
4764                                         $entry->parentNode->removeChild($entry);
4765
4766                                 }
4767                         }
4768                 }
4769
4770                 $node = $doc->getElementsByTagName('body')->item(0);
4771
4772                 // http://tt-rss.org/forum/viewtopic.php?f=1&t=970
4773                 if ($node)
4774                         return $doc->saveXML($node, LIBXML_NOEMPTYTAG);
4775                 else
4776                         return $html;
4777         }
4778
4779         function filter_to_sql($link, $filter, $owner_uid) {
4780                 $query = array();
4781
4782                 if (DB_TYPE == "pgsql")
4783                         $reg_qpart = "~";
4784                 else
4785                         $reg_qpart = "REGEXP";
4786
4787                 foreach ($filter["rules"] AS $rule) {
4788                         $regexp_valid = preg_match('/' . $rule['reg_exp'] . '/',
4789                                 $rule['reg_exp']) !== FALSE;
4790
4791                         if ($regexp_valid) {
4792
4793                                 $rule['reg_exp'] = db_escape_string($rule['reg_exp']);
4794
4795                                 switch ($rule["type"]) {
4796                                         case "title":
4797                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4798                                                         $rule['reg_exp'] . "')";
4799                                                 break;
4800                                         case "content":
4801                                                 $qpart = "LOWER(ttrss_entries.content) $reg_qpart LOWER('".
4802                                                         $rule['reg_exp'] . "')";
4803                                                 break;
4804                                         case "both":
4805                                                 $qpart = "LOWER(ttrss_entries.title) $reg_qpart LOWER('".
4806                                                         $rule['reg_exp'] . "') OR LOWER(" .
4807                                                         "ttrss_entries.content) $reg_qpart LOWER('" . $rule['reg_exp'] . "')";
4808                                                 break;
4809                                         case "tag":
4810                                                 $qpart = "LOWER(ttrss_user_entries.tag_cache) $reg_qpart LOWER('".
4811                                                         $rule['reg_exp'] . "')";
4812                                                 break;
4813                                         case "link":
4814                                                 $qpart = "LOWER(ttrss_entries.link) $reg_qpart LOWER('".
4815                                                         $rule['reg_exp'] . "')";
4816                                                 break;
4817                                         case "author":
4818                                                 $qpart = "LOWER(ttrss_entries.author) $reg_qpart LOWER('".
4819                                                         $rule['reg_exp'] . "')";
4820                                                 break;
4821                                 }
4822
4823                                 if (isset($rule["feed_id"]) && $rule["feed_id"] > 0) {
4824                                         $qpart .= " AND feed_id = " . db_escape_string($rule["feed_id"]);
4825                                 }
4826
4827                                 if (isset($rule["cat_id"])) {
4828
4829                                         if ($rule["cat_id"] > 0) {
4830                                                 $children = getChildCategories($link, $rule["cat_id"], $owner_uid);
4831                                                 array_push($children, $rule["cat_id"]);
4832
4833                                                 $children = join(",", $children);
4834
4835                                                 $cat_qpart = "cat_id IN ($children)";
4836                                         } else {
4837                                                 $cat_qpart = "cat_id IS NULL";
4838                                         }
4839
4840                                         $qpart .= " AND $cat_qpart";
4841                                 }
4842
4843                                 array_push($query, "($qpart)");
4844
4845                         }
4846                 }
4847
4848                 if (count($query) > 0) {
4849                         return "(" . join($filter["match_any_rule"] ? "OR" : "AND", $query) . ")";
4850                 } else {
4851                         return "(false)";
4852                 }
4853         }
4854
4855         if (!function_exists('gzdecode')) {
4856                 function gzdecode($string) { // no support for 2nd argument
4857                         return file_get_contents('compress.zlib://data:who/cares;base64,'.
4858                                 base64_encode($string));
4859                 }
4860         }
4861
4862         function get_random_bytes($length) {
4863                 if (function_exists('openssl_random_pseudo_bytes')) {
4864                         return openssl_random_pseudo_bytes($length);
4865                 } else {
4866                         $output = "";
4867
4868                         for ($i = 0; $i < $length; $i++)
4869                                 $output .= chr(mt_rand(0, 255));
4870
4871                         return $output;
4872                 }
4873         }
4874
4875         function read_stdin() {
4876                 $fp = fopen("php://stdin", "r");
4877
4878                 if ($fp) {
4879                         $line = trim(fgets($fp));
4880                         fclose($fp);
4881                         return $line;
4882                 }
4883
4884                 return null;
4885         }
4886
4887         function tmpdirname($path, $prefix) {
4888                 // Use PHP's tmpfile function to create a temporary
4889                 // directory name. Delete the file and keep the name.
4890                 $tempname = tempnam($path,$prefix);
4891                 if (!$tempname)
4892                         return false;
4893
4894                 if (!unlink($tempname))
4895                         return false;
4896
4897        return $tempname;
4898         }
4899
4900         function getFeedCategory($link, $feed) {
4901                 $result = db_query($link, "SELECT cat_id FROM ttrss_feeds
4902                         WHERE id = '$feed'");
4903
4904                 if (db_num_rows($result) > 0) {
4905                         return db_fetch_result($result, 0, "cat_id");
4906                 } else {
4907                         return false;
4908                 }
4909
4910         }
4911
4912         function create_published_article($link, $title, $url, $content, $labels_str,
4913                         $owner_uid) {
4914
4915                 $guid = sha1($url . $owner_uid); // include owner_uid to prevent global GUID clash
4916                 $content_hash = sha1($content);
4917
4918                 if ($labels_str != "") {
4919                         $labels = explode(",", $labels_str);
4920                 } else {
4921                         $labels = array();
4922                 }
4923
4924                 $rc = false;
4925
4926                 if (!$title) $title = $url;
4927                 if (!$title && !$url) return false;
4928
4929                 if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false;
4930
4931                 db_query($link, "BEGIN");
4932
4933                 // only check for our user data here, others might have shared this with different content etc
4934                 $result = db_query($link, "SELECT id FROM ttrss_entries, ttrss_user_entries WHERE
4935                         link = '$url' AND ref_id = id AND owner_uid = '$owner_uid' LIMIT 1");
4936
4937                 if (db_num_rows($result) != 0) {
4938                         $ref_id = db_fetch_result($result, 0, "id");
4939
4940                         $result = db_query($link, "SELECT int_id FROM ttrss_user_entries WHERE
4941                                 ref_id = '$ref_id' AND owner_uid = '$owner_uid' LIMIT 1");
4942
4943                         if (db_num_rows($result) != 0) {
4944                                 $int_id = db_fetch_result($result, 0, "int_id");
4945
4946                                 db_query($link, "UPDATE ttrss_entries SET
4947                                         content = '$content', content_hash = '$content_hash' WHERE id = '$ref_id'");
4948
4949                                 db_query($link, "UPDATE ttrss_user_entries SET published = true WHERE
4950                                                 int_id = '$int_id' AND owner_uid = '$owner_uid'");
4951                         } else {
4952
4953                                 db_query($link, "INSERT INTO ttrss_user_entries
4954                                         (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)
4955                                         VALUES
4956                                         ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");
4957                         }
4958
4959                         if (count($labels) != 0) {
4960                                 foreach ($labels as $label) {
4961                                         label_add_article($link, $ref_id, trim($label), $owner_uid);
4962                                 }
4963                         }
4964
4965                         $rc = true;
4966
4967                 } else {
4968                         $result = db_query($link, "INSERT INTO ttrss_entries
4969                                 (title, guid, link, updated, content, content_hash, date_entered, date_updated)
4970                                 VALUES
4971                                 ('$title', '$guid', '$url', NOW(), '$content', '$content_hash', NOW(), NOW())");
4972
4973                         $result = db_query($link, "SELECT id FROM ttrss_entries WHERE guid = '$guid'");
4974
4975                         if (db_num_rows($result) != 0) {
4976                                 $ref_id = db_fetch_result($result, 0, "id");
4977
4978                                 db_query($link, "INSERT INTO ttrss_user_entries
4979                                         (ref_id, uuid, feed_id, orig_feed_id, owner_uid, published, tag_cache, label_cache, last_read, note, unread)
4980                                         VALUES
4981                                         ('$ref_id', '', NULL, NULL, $owner_uid, true, '', '', NOW(), '', false)");
4982
4983                                 if (count($labels) != 0) {
4984                                         foreach ($labels as $label) {
4985                                                 label_add_article($link, $ref_id, trim($label), $owner_uid);
4986                                         }
4987                                 }
4988
4989                                 $rc = true;
4990                         }
4991                 }
4992
4993                 db_query($link, "COMMIT");
4994
4995                 return $rc;
4996         }
4997
4998         function implements_interface($class, $interface) {
4999                 return in_array($interface, class_implements($class));
5000         }
5001
5002 ?>